New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RabR #31

Closed

0671 opened this issue Jul 12, 2021 · 1 comment

0671 commented Jul 12, 2021

RabR

Redis-Attack By Replication (通过主从复制攻击Redis)

项目链接

https://github.com/0671/RabR

项目简介

利用Redis的主从复制功能（>=2.8）、模块功能（>=4）、dll劫持，对Linux下的Redis进行攻击，可执行命令和反弹shell，对Window x64下的Redis攻击，可执行命令。

项目特点、亮点

本工具可以对Windows、Linux下的Redis进行攻击。
github上第一个针对Windows下的Redis进行模块攻击的工具（module load可执行系统命令的模块）。
主从复制中会清空从机（目标Redis）的数据，本工具在一定程度上可以保护目标Redis的数据，即在攻击中，会恢复目标Redis的数据。
工具自带Redis爆破功能。

Contributor

0x7Fancy commented Jan 10, 2022

项目未通过404星链计划技术评审环节，期待项目后续的更新和迭代，随时欢迎再次投稿

0x7Fancy closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment