guardicore / guardicore/monkey
Add unauthenticated redis code execution
Open
Beginner friendly
Complexity: Medium
Feature
Impact: Medium
- Dominant language
- Python
- Stars
- 7.1k
- Forks
- 830
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe.**
redis versions 4 and 5 that allow unauthenticated access also allow RCE.
For example code, you can see
https://2018.zeronights.ru/wp-content/uploads/materials/15-redis-post-exploitation.pdf
https://github.com/rapid7/metasploit-framework/pull/12107
**Describe the solution you'd like**
Allow the monkey to carry a redis module to upload to unauthenticated modules.
Solution would look similar to sambacry exploit. If the monkey finds a redis, it attempts to upload a precompiled module.
Contributor guide
Assessment
This issue has not been assessed yet.