CVE-2022-31144

CVE-2022-31144 CVE-2022-31144 dos redis. Rce not finished yet...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

w12scan

w12scan W12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use. W12scan is also my graduation design. : Here is a web source program and the scanning end is at w12scan-client. Thinking Based on python3 + django + elasticsearch + redis...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

CVE-2022-0543-Home-Lab

CVE-2022-0543 — Redis Lua Sandbox Escape Remote Code Execution CVE‑2022‑0543 — Redis Lua Sandbox Escape คืออะไร? ช่องโหว่นี้เกิดเฉพาะบน Redis ที่ติดตั้งผ่าน Debian / Ubuntu package เท่านั้น เพราะ Redis ถูกคอมไพล์พร้อม Lua engine แบบ dynamic module lua-cjson, lua-bitop ทำให้ผู้โจมตีสามารถเรียกใช้:...

iKy

Description | Installation | Website | Modules | Issues | Supporting iKy Description iKy is an OSINT tool that collects information from an email address or other selectors and displays the results in a visual interface. pending update: reflects the previous frontend Video Demo Installation...

opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

monitor

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

redisHack

redisHack Redis unauthorized access detection and CVE-2022-0543 exploitation two-in-one script Usage:...

SSRFX

CVE-2014-4210+Acceso no autorizado a Redis Instalación pip install -r requirements.txt Uso usage: SSRFX.py -h --url URL --threads THREADS --app APP --network NETWORK --type TYPE --vulapp VULAPP --lhost LHOST --lport LPORT --rhost RHOST --rport RPORT SSRF Explotion Tools optional arguments: -h,...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo es un honeypot de código abierto para bases de datos NoSQL que automatiza el proceso de detectar atacantes,registrar incidentes de ataque. Los motores de simulación se despliegan usando el framework twisted.Actualmente el framework tiene...

datapower-redis-rce-exploit

datapower-redis-rce-exploit CVE-2020-5014 A POC for IBM DataPower Authenticated Redis RCE Exploit abusing the "Test Message" Function. Full explination and demo on Youtube Blog post on tomcope.com Explanation Using the DataPower "Send a Test Message" function available through a authenticated...

limitrr-php

Ligera limitación de tasa en PHP usando Redis. Limitrr PHP está muy inspirado en mi otra librería, Limitrr, la cual fue creada para NodeJS. Échale un vistazo aquí Limitrr PHP permite a los usuarios integrar fácilmente limitación de tasa en su aplicación. A diferencia de otros paquetes similares,...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution TL;DR. A malformed DUMP payload passed to RESTORE triggers a heap double-free in Redis's legacy hash-zipmap loader. Under default jemalloc the double-free is silent the server keeps running, which turns it into a controllab...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

pDNS2

pDNS2 Proyecto pDNS2 pDNS2 es otra implementación de una herramienta DNS pasiva que trabaja con Redis como base de datos. pDNS2 significa 'passive DNS version 2' y favorece la velocidad en las consultas sobre otras características de la base de datos. pDNS2 está basado en el dnslogger original de...

karton

Karton Distributed malware processing framework based on Python, Redis and S3. The idea Karton is a robust framework for creating flexible and lightweight malware analysis backends. It can be used to connect malware analysis systems into a robust pipeline with very little effort. We've been in th...

redis-poc

RCE autenticado en Redis doble liberación de NACK en streams, errores de los módulos TDigest y TopK Exploits de RCE no destructivos para Redis 6.2.22, 7.4.9, 8.6.4 mediante la doble liberación de NACK compartido en grupos de consumidores de streams una evasión del parche de CVE-2026-25243, para...