From 39c69cc7531e2efab44d7250101c9f2d685f7b4f Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Tue, 6 Dec 2022 00:11:19 +0530 Subject: [PATCH 1/2] Add files via upload --- network/detection/redis-detect.yaml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 network/detection/redis-detect.yaml diff --git a/network/detection/redis-detect.yaml b/network/detection/redis-detect.yaml new file mode 100644 index 0000000000..72073fa44a --- /dev/null +++ b/network/detection/redis-detect.yaml @@ -0,0 +1,27 @@ +id: redis-detect + +info: + name: Redis Detection + author: pussycat0x + severity: info + metadata: + verified: true + shodan-query: product:"redis" + tags: network,redis,unauth + +network: + - inputs: + - data: "*1\r\n$4\r\ninfo\r\n" + + host: + - "{{Hostname}}" + - "{{Host}}:6379" + read-size: 1024 + + matchers: + - type: word + words: + - "DENIED Redis" + - "CONFIG REWRITE" + - "NOAUTH Authentication" + condition: or From 16372e3ed0810c9c6fee2075d7fae66cc17c78fe Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Tue, 6 Dec 2022 00:14:56 +0530 Subject: [PATCH 2/2] Update redis-detect.yaml --- network/detection/redis-detect.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/network/detection/redis-detect.yaml b/network/detection/redis-detect.yaml index 72073fa44a..ac536804b3 100644 --- a/network/detection/redis-detect.yaml +++ b/network/detection/redis-detect.yaml @@ -7,7 +7,7 @@ info: metadata: verified: true shodan-query: product:"redis" - tags: network,redis,unauth + tags: network,redis network: - inputs: @@ -24,4 +24,4 @@ network: - "DENIED Redis" - "CONFIG REWRITE" - "NOAUTH Authentication" - condition: or + condition: or