Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-49844-Vulnerability-Scanner — Scans Redis instances for CVE-2025-49844 (RediShell) critical RCE vulnerability, detecting vulnerable versions and Lua scripting status with concurrent multi-target support. | Kitploit
Tools/GitHubGitHub/imbas007/cve-2025-49844-vulnerability-scanner
Vulnerability ScannersVulnerability AnalysisExploitationWeb SecurityNetwork SecurityPenetration Testing
GitHubimbas007/cve-2025-49844-vulnerability-scanner

CVE-2025-49844-Vulnerability-Scanner

Scans Redis instances for CVE-2025-49844 (RediShell) critical RCE vulnerability, detecting vulnerable versions and Lua scripting status with concurrent multi-target support.

View Repository
12311 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-49844 (RediShell) Vulnerability Scanner

A comprehensive vulnerability scanner for testing Redis instances against the critical CVE-2025-49844 (RediShell) vulnerability.

About the Vulnerability

  • CVE ID: CVE-2025-49844
  • Name: RediShell
  • CVSS Score: 10.0 (Critical)
  • Type: Use-After-Free (UAF) in Lua Interpreter
  • Impact: Remote Code Execution (RCE)

Vulnerable Versions

All Redis versions before:

  • Redis 8.2.2
  • Redis 8.0.4
  • Redis 7.4.6
  • Redis 7.2.11

Installation

Prerequisites

root@kitploit:~
# Install Python dependencies
pip install redis colorama

# Or use virtual environment
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt

Usage

The scanner supports both single target and list scanning:

root@kitploit:~
# Show help
python3 CVE-2025-49844-Vulnerability-Scanner.py -h

# Single target scan
python3 CVE-2025-49844-Vulnerability-Scanner.py -t 192.168.1.1:6379

# List target scan
python3 CVE-2025-49844-Vulnerability-Scanner.py -l targets.txt

# Single target with custom output
python3 CVE-2025-49844-Vulnerability-Scanner.py -t 192.168.1.1:6379 -o vuln.txt

# List scan with custom settings
python3 CVE-2025-49844-Vulnerability-Scanner.py -l targets.txt -w 20 --timeout 5 -o vuln.txt --json results.json

Command Line Options

  • -t, --target TARGET - Single target to scan (IP:PORT format)
  • -l, --list LIST - File containing list of targets (one per line)
  • -w, --workers WORKERS - Number of concurrent workers (default: 50)
  • --timeout TIMEOUT - Connection timeout in seconds (default: 5)
  • -o, --output OUTPUT - Output file for vulnerable targets (default: vuln.txt)
  • --json JSON - Save detailed results to JSON file
  • --verbose - Verbose output
  • -h, --help - Show help message

Features

  • Multiple Scanner Types: Enhanced, single target, and multi-target scanners
  • Concurrent Scanning: Configurable worker threads for efficient scanning
  • Version Detection: Automatic Redis version detection
  • Lua Scripting Test: Verifies if Lua scripting is enabled
  • Vulnerability Detection: Identifies CVE-2025-49844 vulnerable versions
  • Output Formats: Text and JSON output options
  • Color-coded Results: Easy to read terminal output
  • Detailed Reporting: Comprehensive scan results with metadata

sorce: https://github.com/raminfp

Download Tool