hunt-rce

Identify and execute Remote Code Execution attacks via template injection, dependency confusion, and SSRF.

Updated Jun 18, 2026

Search Tags:#penetration testing #rce #bug bounty #vulnerability exploitation #security hunting

Ready to run

npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-rce-kisilev13

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-rce
Source: https://github.com/Kisilev13/Hermes-Agent-Workspace/tree/main/skills/hunt-rce
Command: npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-rce-kisilev13

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pymongo, requests, BeautifulSoup, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill enables hunters to discover and exploit Remote Code Execution (RCE) vulnerabilities, which pose a critical threat to security due to their ability to grant attackers control over target systems.

Core Features & Use Cases

Exploit Identification: Recognize and act on RCE opportunities from various reports.
Target Prioritization: Rank targets based on asset types and payment potential.
Hunting Methodology: A comprehensive guide for RCE hunting, covering various stages and bypass techniques.

Quick Start

Use the hunt-rce skill to initiate an RCE exploitation attempt against a target server.

Frequently Asked Questions about hunt-rce

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I exploit Remote Code Execution vulnerabilities during penetration testing?▼

To exploit Remote Code Execution vulnerabilities, this Skill applies techniques like template injection, dependency confusion, and SSRF to identify and execute attacks against target servers. It provides a comprehensive methodology covering various hunting stages and bypass techniques.

What is the best way to find RCE targets for bug bounty hunting?▼

The best way to find RCE targets for bug bounty hunting is to prioritize targets based on asset types and payment potential. You can recognize and act on RCE opportunities from various reports to maximize your vulnerability research efficiency.

Can I use this Skill to execute Server-Side Request Forgery attacks?▼

Yes, you can use this Skill to execute Server-Side Request Forgery attacks. It specifically identifies and executes RCE attacks using SSRF alongside template injection and dependency confusion techniques to grant control over target systems.

Do I need network scanning proficiency to use this RCE hunting methodology?▼

Yes, you need network scanning proficiency to use this RCE hunting methodology. It also requires expertise in file manipulation and command execution to successfully identify and exploit Remote Code Execution vulnerabilities.

Does this Skill work with Python dependencies like BeautifulSoup and pymongo?▼

Yes, this Skill works with Python dependencies including BeautifulSoup, pymongo, and requests. These libraries support the vulnerability exploitation process by enabling web scraping, database interactions, and HTTP requests during security hunting.

What bypass techniques are covered in the RCE hunting methodology?▼

The RCE hunting methodology covers various bypass techniques across multiple stages of the exploitation process. It addresses template injection, dependency confusion, and SSRF scenarios to help hunters discover and exploit critical Remote Code Execution vulnerabilities.