Redis:
Enumeration
Redis auth, version, keyspace, and secrets via nmap and redis-cli
Redis enumeration with nmap and redis-cli
Enumerate Redis instances using Nmap scripts and redis-cli to extract server info, config, keys, and identify misconfigurations like unauthenticated access.
Redis enumeration starts with the INFO command, which dumps server version, OS details, memory usage, connected clients, persistence configuration, replication status, and keyspace statistics in one shot. If the server requires no authentication, you get all of this immediately on connection.
CONFIG GET exposes runtime settings including the database directory (dir), database filename (dbfilename), bind address, and whether protected mode is active. These are critical for exploitation since file write attacks depend on controlling dir and dbfilename.
KEYS * lists all keys in the current database, SELECT switches between databases (0-15 by default), and CLIENT LIST shows connected clients and their addresses. DBSIZE gives a quick count per database. Check for sensitive data in key values, since developers frequently store credentials, session tokens, and API keys in Redis without expecting external access.