Skip to content

redis ssrf gopher generater && redis ssrf to rce by master-slave-sync

License

Notifications You must be signed in to change notification settings

vFREE-1/redis-ssrf

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 
 
 

Repository files navigation

redis-ssrf

  1. ssrf to write files. eg: webshell and ssh key
  2. ssrf to rce 4.x - 5.x

Requirements

ssrf-redis.py : python2.x 3.x

rogue-server.py : python2.x (lazy

Usage

implememt for demo.

plz read generate_payload function and change payload.

for rce usage:

  1. change lhost, lport and command, then
    > python ssrf-redis.py
    > gopher://xxxxx

  2. triger ssrf

  3. meanwhile on vps
    > python rogue-server.py
    > Accepted connection from 192.168.x.x

(Need to compile a module named exp.so at first or download other's and store it with rogue-server.py)

Reference

Inspired by https://github.com/n0b0dyCN/redis-rogue-server

Also, modified from https://xz.aliyun.com/t/5665

About

redis ssrf gopher generater && redis ssrf to rce by master-slave-sync

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%