CVE-2024-46981 PoC — Redis 资源管理错误漏洞

Source

https://github.com/xsshk/CVE-2024-46981

Associated Vulnerability

Title:Redis 资源管理错误漏洞 (CVE-2024-46981)
Description:Redis是美国Redis公司的一套开源的使用ANSI C编写、支持网络、可基于内存亦可持久化的日志型、键值（Key-Value）存储数据库，并提供多种语言的API。 Redis存在资源管理错误漏洞。攻击者利用该漏洞可以远程执行代码。

Readme

CVE-2024-46981 poc for redis 6.2.11

credit: https://github.com/p333zy/poc-redis

File Snapshot


 [4.0K]  /data/pocs/024e350600a815ef107d9e1df2c909051a6ae778
├── [5.9K]  exploit.py
├── [  80]  README.md
├── [  13]  requirements.txt
├── [  50]  stage1-clear-heap.lua
├── [ 617]  stage1-forge-objects.lua
├── [3.4K]  stage1-leak-tstring.lua
└── [ 33K]  stage1-uaf.lua

0 directories, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!