hunt-rce

Identify and verify Remote Code Execution vulnerabilities across web applications, cloud infrastructure, and CI/CD pipelines.

13|2|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/pdparchitect/rook --skill hunt-rce-pdparchitect
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hunt-rce
Source: https://github.com/pdparchitect/rook/tree/main/skills/hunt-rce
Command: npx skills add https://github.com/pdparchitect/rook --skill hunt-rce-pdparchitect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, expert-level methodology for identifying and verifying Remote Code Execution (RCE) vulnerabilities, which are often the most critical and high-impact security flaws in modern infrastructure.

Core Features & Use Cases

  • Methodical Hunting: Guides the user through identifying execution contexts, testing template injections, and verifying deserialization gadgets.
  • Chain Analysis: Helps researchers compose complex exploit chains by combining primitives like SSRF, SQLi, or path traversal with execution sinks.
  • Use Case: Use this skill to audit a target's management console or CI/CD pipeline for RCE vulnerabilities by systematically testing configuration fields and API endpoints for code execution primitives.

Quick Start

Use the hunt-rce skill to audit the target repository for potential remote code execution vulnerabilities by following the documented hunting methodology.

Frequently Asked Questions about hunt-rce

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find remote code execution vulnerabilities in a CI/CD pipeline?

To find remote code execution vulnerabilities in a CI/CD pipeline, systematically test configuration-as-code interfaces and API endpoints for execution sinks. Analyze configuration fields to confirm critical impact and verify code execution primitives.

What is the best way to test for server-side template injection during vulnerability auditing?

The best way to test for template injection during vulnerability auditing is to follow a methodical hunting methodology that identifies execution contexts and verifies deserialization gadgets. This confirms whether rendering engines allow arbitrary code execution.

How do I combine SSRF and path traversal primitives to build an RCE exploit chain?

To build an RCE exploit chain, perform chain analysis to combine lower-level primitives like SSRF, SQLi, or path traversal with execution sinks. This composes complex exploits and verifies critical impact across diverse technology stacks.

Can I use this methodology to audit cloud infrastructure for deserialization gadgets?

Yes, you can audit cloud infrastructure for deserialization gadgets. The methodology applies across diverse technology stacks including web applications, cloud infrastructure, and CI/CD pipelines to analyze execution sinks and confirm critical impact.

What is remote code execution vulnerability research and when do I need it?

Remote code execution vulnerability research is the process of identifying and verifying critical security flaws in modern infrastructure. You need it during security auditing, bug bounty research, and vulnerability assessment tasks to confirm high-impact execution risks.