skills.rest
xijunww
xijunwwCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

redis-webroot-rce

Automates Redis-based Web RCE exploitation with minimal payloads for NPS control.

1|Updated Jun 26, 2026
Search Tags:#redis#penetration testing#exploitation#nps#web rce
One-click install
npx skills add https://github.com/xijunww/Pentest --skill redis-webroot-rce
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: redis-webroot-rce
Source: https://github.com/xijunww/Pentest/tree/main/packages/core/src/config/skills/builtin/redis-webroot-rce
Command: npx skills add https://github.com/xijunww/Pentest --skill redis-webroot-rce

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the exploitation of Redis-based Web RCE vulnerabilities, streamlining the process from unauthorized access to persistent command execution.

Core Features & Use Cases

  • Targeted Exploitation: Automates the full attack chain from Redis unauthorized access to web root file write and command execution.
  • Minimal Payloads: Focuses on minimal, effective payloads to ensure rapid convergence to NPS control.
  • Windows/Linux Support: Functions across both Windows and Linux environments.
  • Use Case: When dealing with a target with a Redis server on port 6379 and evidence of unauthorized access or web root file write capabilities, this Skill should be the priority.

Quick Start

Trigger the redis-webroot-rce skill to exploit Redis-based Web RCE vulnerabilities on the target machine.

Frequently Asked Questions about redis-webroot-rce

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit Redis unauthorized access to achieve web RCE?▼

To exploit Redis unauthorized access for web RCE, you need write capabilities to the web root with port 6379 open. This Skill automates the attack chain from access to command execution using targeted payloads.

Can I use Redis web root exploitation on both Windows and Linux targets?▼

Redis web root exploitation works across both Windows and Linux environments. The Skill adjusts command sequences and payloads based on the target's operating system and PHP environment.

What is the best way to automate Redis web RCE for rapid NPS control?▼

Automating Redis web RCE for rapid NPS control requires minimal, effective payloads. This Skill focuses on targeted command sequences to streamline convergence from unauthorized access to persistent command execution.

Do I need PHP installed on the target to execute Redis web root RCE payloads?▼

Executing Redis web root RCE payloads requires a PHP environment on the target. The Skill utilizes specific payload adjustments based on the operating system and PHP configuration to ensure command execution.

What prerequisites are needed before attempting Redis web RCE exploitation?▼

Before attempting Redis web RCE exploitation, you require Redis unauthorized access, write capabilities to the web root, and port 6379 open on the target machine. These conditions enable the automated attack chain.

Related Skills

Explore More Software Engineering Skills→
paulchiupaulchiu
3

fix-redis

Identify and stop processes or containers occupying Redis port 6379.

Community
Intermediate
EntroVyxEntroVyx
3

hunt-springboot

Automate Spring Boot vulnerability identification and exploitation via Actuator and SpEL injection.

Community
Advanced
pekralpekral

docker-patterns

Standardize Docker and docker-compose configurations for Laravel applications.

Community
Advanced
AeonDaveAeonDave
15

lfisuite

Automate LFI vulnerability testing and exploitation to achieve remote code execution.

Community
Advanced