Awesome RCE techniques

Awesome list of techniques to achieve Remote Code Execution (RCE) on various apps!

Goal of this project

The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution (RCE) on various applications. All of these techniques also comes with a test environnement (usually a Docker image) for you to train these techniques.

Techniques

• Content-Management-Systems-(CMS)

  • Drupal: (3 techniques)
  • FuelCMS: (1 technique)
  • Joomla: (1 technique)
  • SweetRice: (2 techniques)
  • Typo3: (1 technique)
  • Wordpress: (3 techniques)

• Frameworks

  • Apache-Tomcat: (2 techniques)
  • JBoss: (1 technique)
  • JoGet: (1 technique)
  • WildFly: (1 technique)

• Learning-Management-Systems-(LMS)

  • Moodle: (1 technique)

• Other

  • GiTea: (1 technique)
  • Gitlab: (1 technique)
  • Jenkins: (1 technique)
  • LimeSurvey: (1 technique)
  • PHP: (1 technique)
  • Rocket.Chat: (1 technique)
  • Webmin: (1 technique)

Work in progress

These techniques are a work in progress. You can help us finish them by opening a pull request!

Troubleshooting

Report all the issues on https://github.com/p0dalirius/Awesome-RCE-techniques/issues.

Contributors

Pull requests are welcome. Feel free to open an issue if you want to add other Remote Code Execution (RCE) techniques.