Skip to content

This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容,用于SSRF等利用。

License

Notifications You must be signed in to change notification settings

LS95/gopher-redis-auth

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

gopher-redis-auth

This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.

redis生成gopher利用代码的脚本,包括认证和非认证功能, 主要是在原始代码Gopherus里redis模块的基础上增加authPrePayload用于认证。

示例

redis.conf 设置密码为123123

设置密码

生成shell

生成

curl -v "contens"

利用

查看shell

生成

参考

Gopherus

浅析SSRF认证攻击Redis

About

This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容,用于SSRF等利用。

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages