Skip to content
forked from redis/redis

evilRedis is basically redis with a backdoor shell in it. Re-learning C, so figured that messing with redis would be a fun way to do it.

License

Notifications You must be signed in to change notification settings

keshiba/evilRedis

 
 

Repository files navigation

What is Redis?

To answer that question, go to - redis/redis repository

What is evilRedis?

evilRedis is the devil re-incarnation .... umm, blah blah.

Why evilRedis?

  1. Was bored
  2. Needed to re-learn C
  3. I knew much about redis and thought that it would be the apt playground to learn c again
  4. Was exploiting buffer overflows and writing shellcodes recently (harmless CTFs of course)
  5. All of that just came together I guess

It was an accident! Honestly...

How it works?

Horn #1 - Taming echo

Pass in your shell command using redis's echo command along with a trigger keyword.

# Normal echo behavior
> echo whoami
whoami

# Shell execution is triggered with the keyword "evilRedisCmd:"
> echo evilRedisCmd:whoami
keshiba\n

When evilRedis finds the trigger keyword, it will try to execute the command that follows in the shell and returns the output. Fun right?

Stay tuned for more...

Until then, Enjoy!

About

evilRedis is basically redis with a backdoor shell in it. Re-learning C, so figured that messing with redis would be a fun way to do it.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C 83.8%
  • Tcl 14.3%
  • Objective-C 0.6%
  • Shell 0.4%
  • Ruby 0.4%
  • Makefile 0.3%
  • Other 0.2%