Shulou(Shulou.com)06/01 Report--

Using redis to write webshell

Need to meet: 1. Redis can be accessed remotely; 2. Redis has no password; 3. Web service is running on the server; 4. Know the root directory of web service.

Http://www.jjsec.com/redis-getshell case sharing. Html

Http://www.secpulse.com/archives/5357.html

For the solution, please refer to the redis database security manual

Http://www.freebuf.com/articles/system/60654.html

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.