redis-webroot-rce

Automates Redis-based Web RCE exploitation with minimal payloads for NPS control.

1|Updated Jun 26, 2026

Search Tags:#redis #penetration testing #exploitation #nps #web rce

Ready to run

npx skills add https://github.com/xijunww/Pentest --skill redis-webroot-rce

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: redis-webroot-rce
Source: https://github.com/xijunww/Pentest/tree/main/packages/core/src/config/skills/builtin/redis-webroot-rce
Command: npx skills add https://github.com/xijunww/Pentest --skill redis-webroot-rce

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the exploitation of Redis-based Web RCE vulnerabilities, streamlining the process from unauthorized access to persistent command execution.

Core Features & Use Cases

Targeted Exploitation: Automates the full attack chain from Redis unauthorized access to web root file write and command execution.
Minimal Payloads: Focuses on minimal, effective payloads to ensure rapid convergence to NPS control.
Windows/Linux Support: Functions across both Windows and Linux environments.
Use Case: When dealing with a target with a Redis server on port 6379 and evidence of unauthorized access or web root file write capabilities, this Skill should be the priority.

Quick Start

Trigger the redis-webroot-rce skill to exploit Redis-based Web RCE vulnerabilities on the target machine.

Frequently Asked Questions about redis-webroot-rce

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I exploit Redis unauthorized access to achieve web RCE?▼

To exploit Redis unauthorized access for web RCE, you need write capabilities to the web root with port 6379 open. This Skill automates the attack chain from access to command execution using targeted payloads.

Can I use Redis web root exploitation on both Windows and Linux targets?▼

Redis web root exploitation works across both Windows and Linux environments. The Skill adjusts command sequences and payloads based on the target's operating system and PHP environment.

What is the best way to automate Redis web RCE for rapid NPS control?▼

Automating Redis web RCE for rapid NPS control requires minimal, effective payloads. This Skill focuses on targeted command sequences to streamline convergence from unauthorized access to persistent command execution.

Do I need PHP installed on the target to execute Redis web root RCE payloads?▼

Executing Redis web root RCE payloads requires a PHP environment on the target. The Skill utilizes specific payload adjustments based on the operating system and PHP configuration to ensure command execution.

What prerequisites are needed before attempting Redis web RCE exploitation?▼

Before attempting Redis web RCE exploitation, you require Redis unauthorized access, write capabilities to the web root, and port 6379 open on the target machine. These conditions enable the automated attack chain.