nuclei-templates/network/detection/redis-detect.yaml

id: redis-detect

info:
  name: Redis Service - Detect
  author: pussycat0x
  severity: info
  description: Redis service was detected.
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    verified: true
    max-request: 2
    shodan-query: product:"redis"
  tags: network,redis,detect
tcp:
  - inputs:
      - data: "*1\r\n$4\r\ninfo\r\n"

    host:
      - "{{Hostname}}"
      - "tls://{{Hostname}}"
    port: 6379,6380
    read-size: 1024

    matchers:
      - type: word
        words:
          - "DENIED Redis"
          - "CONFIG REWRITE"
          - "NOAUTH Authentication"
        condition: or
# digest: 4a0a0047304502200bc9506e22373d4c7518dc473876f7c058ca64ad227eb2734ffbbb1739828e20022100fbe3393100160e628557dde8d0d5272c3607241173e9a48b057c03cebea744b5:922c64590222798bb761d5b6d8e72950
Add files via upload 2022-12-05 18:41:19 +00:00			`id: redis-detect`

			`info:`
Enhancement: network/detection/redis-detect.yaml by md 2023-02-06 15:25:10 +00:00			`name: Redis Service - Detect`
Add files via upload 2022-12-05 18:41:19 +00:00			`author: pussycat0x`
			`severity: info`
Enhancement: network/detection/redis-detect.yaml by md 2023-02-06 15:25:10 +00:00			`description: Redis service was detected.`
			`classification:`
			`cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N`
			`cwe-id: CWE-200`
Add files via upload 2022-12-05 18:41:19 +00:00			`metadata:`
TemplateMan Update [Sat Mar 23 09:28:19 UTC 2024] :robot: 2024-03-23 09:28:19 +00:00			`verified: true`
TemplateMan Update [Thu Nov 23 06:31:40 UTC 2023] :robot: 2023-11-23 06:31:41 +00:00			`max-request: 2`
Add files via upload 2022-12-05 18:41:19 +00:00			`shodan-query: product:"redis"`
Revert "TemplateMan Update [Mon Apr 8 11:30:07 UTC 2024] :robot:" This reverts commit 433dda4ae5b824564b44075bb95a96ecdbe263a6. 2024-04-08 11:34:33 +00:00			`tags: network,redis,detect`
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`tcp:`
Add files via upload 2022-12-05 18:41:19 +00:00			`- inputs:`
			`- data: "*1\r\n$4\r\ninfo\r\n"`

			`host:`
Update redis-detect.yaml 2023-11-21 05:57:24 +00:00			`- "{{Hostname}}"`
Update redis-detect.yaml 2023-11-21 07:24:05 +00:00			`- "tls://{{Hostname}}"`
Redis default port is 6379 and in some cases 6380 also used 2024-03-15 20:31:19 +00:00			`port: 6379,6380`
Add files via upload 2022-12-05 18:41:19 +00:00			`read-size: 1024`

			`matchers:`
			`- type: word`
			`words:`
			`- "DENIED Redis"`
			`- "CONFIG REWRITE"`
			`- "NOAUTH Authentication"`
Update redis-detect.yaml 2022-12-05 18:44:56 +00:00			`condition: or`
Auto Template Signing [Mon Mar 25 11:57:16 UTC 2024] :robot: 2024-03-25 11:57:16 +00:00			`# digest: 4a0a0047304502200bc9506e22373d4c7518dc473876f7c058ca64ad227eb2734ffbbb1739828e20022100fbe3393100160e628557dde8d0d5272c3607241173e9a48b057c03cebea744b5:922c64590222798bb761d5b6d8e72950`