write-path-to-rce
OfficialEscalate file writes to remote code execution.
Software Engineering#path traversal#red teaming#template injection#remote code execution#arbitrary file write#web framework exploitation#view engine abuse
Authordreadnode
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This skill solves the challenge of gaining remote code execution on a target web application when only arbitrary file write access (such as via path traversal or file upload vulnerabilities) is available and direct execution of script files is blocked by server-side filtering.
Core Features & Use Cases
- Multi-framework support: Provides tailored exploitation workflows for Django, Flask, Express.js, Ruby on Rails, Laravel, and ASP.NET MVC applications.
- Step-by-step guidance: Walks through confirming write access, identifying the target framework, planting payloads in framework-resolved paths, and triggering execution.
- Red teaming use case: Enables authorized security testers to escalate low-severity file write vulnerabilities to full system compromise by abusing built-in framework view and autoload resolution logic.
Quick Start
Use this skill to escalate a confirmed arbitrary file write vulnerability on a target running a supported web framework to remote code execution by abusing the framework's view or autoload path resolution.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: write-path-to-rce Download link: https://github.com/dreadnode/capabilities/archive/main.zip#write-path-to-rce Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 537,000+ vetted skills library on demand.