Skip to content

v0.26.0 — RedisHoneyPot (cypwnpwnsocute/RedisHoneyPot)

Choose a tag to compare

View all tags
@sshpie sshpie released this 26 Aug 00:22
· 10 commits to main since this release
v0.26.0
f19dd57

Adds fingerprinting for RedisHoneyPot (cypwnpwnsocute/RedisHoneyPot).

Four-probe chain — all probes at the RESP protocol layer, no auth required:

  • 99% — AUTH x returns -ERR unknown command AUTH`` — no case "auth" in dispatch; real Redis 6.x always handles AUTH
  • 99% — INFO server returns static run_id:41be2f14e917b27b95ab0fe58f90d9521661dcd1 (redis.conf:18 — hardcoded; real Redis regenerates on every startup)
  • 99% — INFO replication returns static master_replid:e8ab6fdf17602f25e3aee87612ddaa3919502761 (redis.conf:124 — hardcoded; real Redis regenerates after restart or simulated failover)
  • 90% — GET nonexistent returns +(nil) simple string instead of $-1 bulk null (RESP type mismatch in server.go)

Wired before the generic Redis depth test in the verdict.go Redis dispatch.

Assets 3
Loading