domains / families / security / offensive-rce

offensive-rce

separate

A testing checklist for Remote Code Execution (RCE) vulnerabilities including OS command injection, SSTI, deserialization, file upload, and CVE-based patterns. Used for web application penetration testing and bug bounty RCE discovery.

When to use

• OS command injection
• SSTI-to-RCE
• deserialization RCE
• file upload RCE
• XXE with SSRF to RCE
• RCE via dependency confusion
• CVE-based RCE patterns
• web app pentests

Skill page

Source