CVE-2022-0543 PoC — Redis 代码注入漏洞

Source

https://github.com/JacobEbben/CVE-2022-0543

Associated Vulnerability

Title: Redis 代码注入漏洞 (CVE-2022-0543)
Description:It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Description

Redis RCE through Lua Sandbox Escape vulnerability

Readme

# CVE-2022-0543
Fully featured exploit for Redis RCE through Lua Sandbox Escape vulnerability. Based on https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/.

Features:
  - Automatic reverse shell (-I + -P)
  - Single command execution (-x)
  - Basic shell (Default)

TO DO:
  - Need better checks to prevent false-positives

DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →