Find open port (22, 80, 6379, 8080, 27017)
![]()
Foothold
Find exploit for Redis 5.x.x
A google search revealed this Github repo.
That repo linked to another repo which no longer existed, but I found another repo which had the same name RedisModules-ExecuteCommand, so it may be a mirror.
Access
Execute the exploit and obtain root permissions
I ran the exploit with help from the README file. I used the -f flag to link to the module.so file in the RedisModules-ExecuteCommand repo.
Obtain proof.txt