Skip to content
SelfSec
Join the launch listLaunch list
SelfSec
Vulnerability field guide

Remote Code Execution

Remote code execution is the worst outcome a web bug can produce. Here is how attacker-controlled input reaches an execution sink, the common vectors that get there, and how to close them.

2 articles 11 min total Overview to advanced techniques

Start with the overview

Remote Code Execution6 min read

Remote Code Execution: When User Input Becomes Server Code

Remote code execution is the worst outcome a web bug can produce. Here is how attacker-controlled input reaches an execution sink, the common vectors that get there, and how to close them.

Read the overview

Remote Code Execution techniques

1 focused deep-dive
  1. 02 Eval InjectionEval Injection: When a Runtime Treats User Text as Code 5 min