Exploitation

Redis Authenticated Access – Password Brute Force and Login

CVE-2022-0543 – Redis Lua Sandbox Escape RCE

Redis Master-Slave Replication RCE

Exploiting Redis master-slave replication to achieve RCE by loading a malicious module via the SLAVEOF command on exposed instances.

Redis RCE via Cron Job Write

Redis RCE via Malicious Module Load

Exploit unauthenticated or authenticated Redis instances by loading a malicious .so module to achieve remote code execution on the target system.

Redis RCE via SSH Key Injection

Exploit unauthenticated Redis instances to achieve RCE by injecting attacker-controlled SSH public keys into root's authorized_keys via Redis config manipulation.

SSRF to Redis – Gopher Protocol Command Injection

Redis Unauthenticated Access – No-Auth Enumeration and Exploitation

Redis Webshell Write – Planting a Shell via File Write