Hunt remote code execution vulnerabilities using field-validated techniques from bug bounty reports.
npx skills add https://github.com/uphiago/recon-skills --skill hunt-rce-uphiago
Please help me install this Agent Skill. Skill: hunt-rce Source: https://github.com/uphiago/recon-skills/tree/main/redteam/hunt-rce Command: npx skills add https://github.com/uphiago/recon-skills --skill hunt-rce-uphiago
RCE vulnerabilities deliver the highest payouts in bug bounty programs, but they are difficult to find consistently across diverse tech stacks, admin interfaces, and cloud infrastructure. This skill eliminates guesswork by providing field-validated hunting techniques derived from 67 real public bug bounty reports, covering every major RCE vector and attack surface.
Use the hunt-rce skill to map all RCE-prone execution contexts on the target, test validated payloads for template injection, deserialization, and dependency confusion, and chain low-severity primitives into a demonstrated critical RCE finding with out-of-band confirmation.
High-intent search queries and answers about installing and using this skill.
To find remote code execution vulnerabilities consistently, you need field-validated hunting techniques mapped to specific execution contexts. This skill provides payload libraries and attack surface mapping for template engines, deserialization, and dependency confusion across diverse enterprise infrastructure.
The best way to hunt for template injection and dependency confusion bugs is to use proven payloads derived from real bug bounty reports. This skill provides validated detection libraries and bypass techniques for common WAF rules to identify these specific RCE vectors.
Yes, you can use this skill for penetration testing on cloud-native infrastructure and admin consoles. It identifies RCE-prone execution contexts in Kubernetes clusters, management interfaces, and supply chain registries with specific URL patterns and tech stack signals.
To chain low-severity primitives into a critical RCE finding, you break down high-paying attack chains into testable primitive steps. This skill guides you through combining these primitives with out-of-band confirmation to produce triage-ready reports.
Yes, this skill provides payloads for bypassing WAF rules during RCE hunting. It includes a proven payload and detection library with bypass techniques for common filters, covering over ten major vectors like unsafe deserialization and path traversal to execution.
When testing for path traversal to execution, limitations depend on the target's specific execution contexts and filter rules. This skill mitigates guesswork by providing field-validated payloads and cross-references to complementary hunting skills for comprehensive coverage.
yhy0Automate detection and exploitation workflows for remote code execution vulnerabilities.
mindfortaiTriage cybersecurity findings for validity, exploitability, impact, and evidence quality.
rohitg00Automate progressive Kubernetes deployments with Argo Rollouts and Flagger.
cybersecwomanAutomate identification of Remote Code Execution vulnerabilities across various targets.
