redis-webroot-rce
redis-webroot-rce is a Penetration testing & red team skill for AI agents, published by m-sec-org in the BreachWeave repository on GitHub. Skillspace rates redis-webroot-rce D (59/100) and it passed the safety scan; the rating is based on static analysis only.
Windows/Linux 场景下基于 Redis 未授权访问写入 Web 根并获取稳定命令执行、随后快速收敛到 NPS 的专项技能。只要用户提到 Redis、Redis未授权、6379、fscan 提示 unauthorized file、CONFIG SET dir/dbfilename、写 webshell、写计划任务、写 ssh key，或者已经确认 Redis 能写入 Web 目录，就应优先使用本技能，而不是走泛化 Web 利用或 SMB 分支。尤其在用户已经有上游跳板、NPS 通道、HTTP 映射端口时，必须优先触发本技能。
- Grade
- D
- Quality
- 59 / 100
- Safety
- Passed
- GitHub stars
- 427
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 84 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- No issues found
- License
- Apache-2.0
- Adoption
- Adopted by 1 other repositories, in 0 collections
Not checked yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.