Unauthorized Access Common Services

This is your playbook for exploiting exposed infrastructure services that should never face the internet but often do. It walks through unauthenticated Redis (write SSH keys, cron jobs, or webshells), Rsync data exfiltration, PHP-FPM FastCGI RCE, Ghostcat AJP file reads, Hadoop YARN job submission for shells, and H2 Console JNDI injection. Each section gives you detection commands, exploitation steps with actual tooling, and the hardening config that would have stopped you. The port matrix alone is worth having loaded when you're triaging nmap output. These are infrastructure wins, not web app bugs, so you're often root or equivalent once you land the exploit.

skills.sh installs: 3.6K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill unauthorized-access-common-services --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: Unauthorized Access to Common Services — Expert Attack Playbook

AI LOAD INSTRUCTION: Expert techniques for exploiting unauthenticated or weakly authenticated management services. Covers Redis write-to-RCE, Rsync data theft, PHP-FPM code execution, Ghostcat AJP file read, Hadoop YARN job submission, and H2 Console JNDI. These are infrastructure-level findings distinct from web application vulnerabilities.

0. RELATED ROUTING

ssrf-server-side-request-forgery when these services are reachable via SSRF (e.g., SSRF → Redis)
jndi-injection when H2 Console or similar accepts JNDI connection strings
deserialization-insecure when RMI Registry or T3 protocol is exposed
network-protocol-attacks for layer 2/3 attacks during service enumeration
reverse-shell-techniques for shell payloads after gaining command execution