guardicore / guardicore/monkey

Add unauthenticated redis code execution

Open
#591 0 comments 0 reactions 0 assignees View on GitHub
Beginner friendly Complexity: Medium Feature Impact: Medium
Dominant language
Python
Stars
7.1k
Forks
830
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
redis versions 4 and 5 that allow unauthenticated access also allow RCE.
For example code, you can see
https://2018.zeronights.ru/wp-content/uploads/materials/15-redis-post-exploitation.pdf
https://github.com/rapid7/metasploit-framework/pull/12107

**Describe the solution you'd like**
Allow the monkey to carry a redis module to upload to unauthenticated modules.
Solution would look similar to sambacry exploit. If the monkey finds a redis, it attempts to upload a precompiled module.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.