RCE is a type of attack that enables an attacker to execute arbitrary commands on a target machine, potentially gaining total control over the system and accessing sensitive data. There are numerous ways to achieve RCE, including unrestricted file uploads, command injection, SQL injection, XML external entity (XXE) attacks, server-side template injection (SSTI), and server-side request forgery (SSRF). To identify potential entry points for code execution, it's essential to understand the web application's functionality, context is key, and testing every potentially vulnerable endpoint or service is crucial. The author of this article successfully exploited a critical vulnerability in Adobe Experience Manager by bypassing the AEM Dispatcher and executing arbitrary commands using GroovyConsole, demonstrating the capabilities of RCE. Understanding server-side issues, enumeration, and thinking like an attacker are essential takeaways from this experience, and it's recommended to check out expert presentations on exploiting different image processors and finding impactful bugs.