AI Summary: The “Awesome RCE Techniques” repository is an open-source knowledge database that compiles various methods for achieving Remote Code Execution (RCE) across different applications. It features a collection of 24 RCE techniques categorized by platform type, including Content Management Systems and frameworks, each accompanied by Docker images for practical training and testing. This resource facilitates learning and experimentation for security professionals and developers interested in RCE dynamics.

README

Awesome RCE techniques

Awesome list of techniques to achieve Remote Code Execution (RCE) on various apps!

Goal of this project

The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution (RCE) on various applications. All of these techniques also comes with a test environnement (usually a Docker image) for you to train these techniques.

Techniques

• Content-Management-Systems-(CMS)

  • Drupal: (3 techniques)
  • FuelCMS: (1 technique)
  • Joomla: (1 technique)
  • SweetRice: (2 techniques)
  • Typo3: (1 technique)
  • Wordpress: (3 techniques)

• Frameworks

  • Apache-Tomcat: (2 techniques)
  • JBoss: (1 technique)
  • JoGet: (1 technique)
  • WildFly: (1 technique)

• Learning-Management-Systems-(LMS)

  • Moodle: (1 technique)

• Other

  • GiTea: (1 technique)
  • Gitlab: (1 technique)
  • Jenkins: (1 technique)
  • LimeSurvey: (1 technique)
  • PHP: (1 technique)
  • Rocket.Chat: (1 technique)
  • Webmin: (1 technique)

Work in progress

These techniques are a work in progress. You can help us finish them by opening a pull request!

Troubleshooting

Report all the issues on https://github.com/p0dalirius/Awesome-RCE-techniques/issues.

Contributors

Pull requests are welcome. Feel free to open an issue if you want to add other Remote Code Execution (RCE) techniques.