Preliminary research

RCEKit: proof-backed RCE detection and confirmation

kabiri-labs · GitHub

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

RCEKit tests command and expression injection with proof-tiered verdicts. Random computed outputs, payload-free and inert controls, explicit inconclusive/error states, captured-request replay, and blind or no-egress methods distinguish confirmed execution from reflection, reachability and weaker signals.

Record

Researcher

kabiri-labs

Published by

GitHub

Format

Repository

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• tooling
• command-injection
• ssti
• rce
• timing-attack
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of kabiri-labs, first published at the original source. Preserved copies are kept so the citation survives its host.