Find exploitable access in exposed server services.
What it does
Guides checks and exploitation of exposed management services to identify unauthenticated access, file disclosure, and remote command execution.
When to use it
Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interfaces are exposed without authentication.
How to use it
Give it a target host; it guides discovery and service-specific checks for unauthenticated access and exploitation.
What you provide
- a target host
Uses
RS
Good to know
- cannot be undone: Redis
Latest review
What you need · 1
The discovery step uses nmap to identify exposed services on the target host.
Access · 5
This skill
Redis
Execute
Loads a remote executable module
Write
Writes remote keys and backdoors (irreversible)
Rsync
Write
Uploads a remote cron backdoor
Hadoop YARN
Execute
Starts a remote shell job
Write
Submits a remote shell job