Test a URL or captured HTTP request for RCE—and know what the evidence actually proves. RCEKit checks command injection, SSTI and blind paths, separates confirmed execution from uncertain signals and untested runs, and generates targeted payloads for Burp, ffuf and Nuclei. One Python file; no third-party dependencies.
security reverse-shell penetration-testing rce web-security pentesting vulnerability-detection payload offensive-security payloads code-injection red-team security-tools command-injection remote-code-execution ssti oob blind-rce
-
Updated
Oct 1, 2026 - Python