CVE-2025-49844

CVE-2025-49844 – Redis Lua Parser Use-After-Free Lua chunk-name GC race leading to Redis 8.2.1 use-after-free and remote code execution. Overview Redis embeds Lua 5.1 for scripting. In versions up to 8.2.1 the luaYparser function does NOT anchor the chunk name string on the Lua stack before...

CVE-2024-31989

CVE-2024-31989 CVE-Exploit for Argo CD This repository contains an exploit for CVE-2024-31989 that targets a Redis instance without a password in Argo CD. Description Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This exploit leverages a vulnerability in Argo CD where ...

redisHack

redisHack Redis unauthorized access detection and CVE-2022-0543 exploitation two-in-one script Usage:...

w12scan

w12scan W12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use. W12scan is also my graduation design. : Here is a web source program and the scanning end is at w12scan-client. Thinking Based on python3 + django + elasticsearch + redis...

CVE-2022-0543

CVE-2022-0543 1.Introduction Redis Sandbox Escape Vulnerability CVE-2022-0543 POC&EXP 2.Usage root@kitploit: RedisRCE -help 查看帮助信息 RedisRCE -h 192.168.0.100:6379 无密码连接 //输入q退出程序 RedisRCE -h 192.168.0.100:6379 -p 123456 密码连接 3.Disclaimer This tool is only for learning, research, and self-checking...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

monitor

BetterDB Monitor...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-

CVE-2026-22003 – Redis Lua Sandbox Escape via debug.sethook Program Code Lua + Python trigger root@kitploit: -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" loc...

redis-poc

Redis Authenticated RCE stream NACK double free, TDigest & TopK module bugs Non-destructive RCE exploits for Redis 6.2.22, 7.4.9, 8.6.4 via the stream consumer-group shared-NACK double free a patch bypass of CVE-2026-25243, 8.8.0 via a TDigest heap-overflow in bundled RedisBloom, and 8.8.1 via a...

EUVD-2026-69701

Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections...

redis-post-exploitation

redis-post-exploitation For educational purposes only Reference https://2018.zeronights.ru/wp-content/uploads/materials/15-redis-post-exploitation.pdf https://paper.seebug.org/975/ Rogue Server https://github.com/knqyf263/redis-rogue-server Build root@kitploit: $ docker-compose build Run...

redis-exploitation

redis-exploitation CONFIG SET For educational purposes only Build root@kitploit: $ docker build -t victim . Run root@kitploit: $ docker run -d --name victim victim Attack root@kitploit: $ docker exec -it victim bash root@kitploit: root@34ea33cb2eb2 / ls /var/spool/cron/ root@34ea33cb2eb2 /...

CVE-2024-46981

CVE-2024-46981 poc for redis 6.2.11 credit: https://github.com/p333zy/poc-redis...

CVEs

CVE-2022-2992: Remote Command Execution via Github import Information Description: This allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint. Versions Affected: all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 Version Fixed:...

redis-cve-2025-62507

Exploit Scripts — CVE-2025-62507 Directory Structure root@kitploit: scripts/ ├── exploitx86.py x86-64 ROP exploit ├── exploitarm64.py ARM64 AArch64 ROP exploit └── gdbwithsymbols.sh GDB debugging helper script Vulnerability Summary Item| Description ---|--- CVE| CVE-2025-62507 Vulnerability Type|...

CVE-2026-48172---LiteSpeed-cPanel-Plugin-Version-Auditor

CVE-2026-48172 - LiteSpeed cPanel Plugin Vulnerability Auditor This repository contains a local security compliance and auditing tool designed to detect vulnerable installations of the LiteSpeed User-End cPanel Plugin affected by CVE-2026-48172. The goal of this project is to assist System...

redis-cve-2026-23479-check

redis-cve-2026-23479-check A safe, read-only version checker for CVE-2026-23479 — the use-after-free in Redis's blocking-client code that lets an authenticated user reach remote code execution on the host. It does not exploit the bug. It connects, optionally authenticates, runs a single read-only...

Mongodb-Redis-scan

Mongodb-Redis-scan mongodb-redis anonymous scan script, supports anonymous scanning of mongodb and redis mongodb-redis anonymous scan script, supports anonymous scanning of mongodb and redis. This script was written for a previous requirement, and now it is shared for everyone to learn and...

CVE-2025-49844

CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...