🐧
Sybaris
  • Sybaris
    • Summary
  • Enumeration
    • TCP
    • UDP
    • Web Services
      • Nikto
      • Dirb Extensions
      • Dirsearch
      • goBuster
      • Robots
      • FeroxBuster
      • Whatweb
    • Other Services
      • FTP
      • SSH
      • Redis
  • Exploitation
  • Priv Escalation
  • Notes
Powered by GitBook
On this page

Exploitation

PreviousRedisNextPriv Escalation

Last updated 2 years ago

Having both autenticated to redis and ftp it is dangerous practice to have them both open at the same time because with redis we can load modules directly from the folders that the ftp server runs.

Using this exploit. I used the command "make" to build the module.so that it is needed for this exploit.

After uploading the module.so to the pub directory all we had to do was go on google and look this up.

The pub directory in anonymous access in ftp is located in /var/ftp/pub/module.so

6379 - Pentesting RedisHackTricks
GitHub - n0b0dyCN/RedisModules-ExecuteCommand: Tools, utilities and scripts to help you write redis modules!GitHub
Direct Access on Pub Directory for Anonymous user on FTP server
Logo
Logo
Logo