Skip to content
HackIndex logo

HackIndex

Redis
Service

Redis

Redis in-memory store tested for unauth access, version flaws, and keyspace secrets. Exploits include RCE via file writes, SSH key injection, cron abuse, auth bypass, and SSRF for lateral movement

:6379 12 guides 4 phases
1 min read Updated: Jul 13, 2026

What is Redis?

Redis is an in-memory key-value store used for caching, message brokering, and fast data access.

Common security issues

  • No authentication.

  • Exposed to internet.

  • Unprotected write commands leading to RCE.

  • Unauthorized persistence file writes.

Default ports

  • 6379

Enumeration

Redis auth, version, keyspace, and secrets via nmap and redis-cli

1
Redis enumeration with nmap and redis-cli

Redis enumeration with nmap and redis-cli

Enumerate Redis instances using Nmap scripts and redis-cli to extract server info, config, keys, and identify misconfigurations like unauthenticated access.

Jan 18, 2026 • 4 min read

Exploitation

RCE, auth bypass, SSRF, and shell writes against Redis

9
Redis Master-Slave Replication RCE

Redis Master-Slave Replication RCE

Exploiting Redis master-slave replication to achieve RCE by loading a malicious module via the SLAVEOF command on exposed instances.

Mar 14, 2026 • 3 min read

Redis RCE via Malicious Module Load

Exploit unauthenticated or authenticated Redis instances by loading a malicious .so module to achieve remote code execution on the target system.

Mar 14, 2026 • 4 min read
Redis RCE via SSH Key Injection

Redis RCE via SSH Key Injection

Exploit unauthenticated Redis instances to achieve RCE by injecting attacker-controlled SSH public keys into root's authorized_keys via Redis config manipulation.

Mar 14, 2026 • 3 min read

Privilege Escalation

Escalate via Redis file writes to SUID, SSH keys, or cron paths

1

Persistence

Write SSH keys, cron jobs, or webshells via Redis config

1

Redis Persistence via CONFIG SET

Abuses Redis CONFIG SET to redirect DB dumps or AOF logs to attacker-controlled paths, achieving filesystem writes and persistent backdoor placement.

May 6, 2026 • 4 min read