# Exploitation

> RCE via service health checks, exec API, and ACL token theft

- **URL:** https://hackindex.io/services/consul/exploitation
- **Service:** [Consul](https://hackindex.io/services/consul.md)
- **Published:** 2026-09-14
- **Updated:** 2026-09-14

## Guides

- [Consul RCE](https://hackindex.io/services/consul/exploitation/consul-rce.md): Exploiting HashiCorp Consul misconfigurations to achieve Remote Code Execution via the HTTP API, service registration endpoints, and exec functionality.