redis-cli
Redis client: enumerates keys and config, and loads modules for RCE.
The Redis client. If the service is unauthenticated (or has a weak password) it lets you read every key and, by controlling the working directory, write arbitrary files: a webshell in the web root or an SSH key into authorized_keys. Versions 4/5 allow RCE by loading modules.
Family Databases
Flags -h -a info CONFIG SLAVEOF
Concepts Redis enumeration, Redis RCE via MODULE LOAD
Cheatsheet Redis · 6379
Installation
sudo apt install -y redis-toolsUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.