CVE-2022-0543 PoC — Redis 代码注入漏洞

Source

https://github.com/z92g/CVE-2022-0543

Associated Vulnerability

Title: Redis 代码注入漏洞 (CVE-2022-0543)
Description:It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Description

Redis 沙盒逃逸（CVE-2022-0543）POC&EXP

Readme

# CVE-2022-0543

# 1.简介

Redis 沙盒逃逸漏洞（CVE-2022-0543）POC&EXP

# 2.用法

```
RedisRCE -help (查看帮助信息)
RedisRCE -h 192.168.0.100:6379 (无密码连接)  //输入q退出程序
RedisRCE -h 192.168.0.100:6379 -p 123456 (密码连接)
```
![image](https://user-images.githubusercontent.com/108780847/180609014-0329108e-c36c-4384-aece-4f1d05e41567.png)

# 3.免责声明

此工具仅用于学习、研究和自查。
不应用于非法目的，请遵守相关法律法规。
使用本工具产生的任何风险与本人无关！

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →