nuclei-templates/javascript/enumeration/redis/redis-info.yaml

54 lines
1.6 KiB
YAML

id: redis-info
info:
name: Redis Info - Detect
author: DhiyaneshDK
severity: info
description: |
Retrieves information (such as version number and architecture) from a Redis key-value store.
reference:
- https://nmap.org/nsedoc/scripts/redis-info.html
metadata:
max-request: 1
shodan-query:
- product:"redis"
- http.title:"airflow - dags" || http.html:"apache airflow"
- http.title:"sign in - airflow"
product: airflow
vendor: apache
fofa-query:
- apache airflow
- title="airflow - dags" || http.html:"apache airflow"
- title="sign in - airflow"
google-query:
- intitle:"airflow - dags" || http.html:"apache airflow"
- intitle:"sign in - airflow"
tags: js,redis,network,enum
javascript:
- pre-condition: |
isPortOpen(Host,Port);
code: |
const redis = require('nuclei/redis');
const info = redis.GetServerInfo(Host,Port);
Export(info);
args:
Host: "{{Host}}"
Port: "6379"
extractors:
- type: regex
part: response
regex:
- redis_version:(\d+\.\d+\.\d+)
- os:(.*?)\\r\\n
- arch_bits:(\d+)\s+bits
- process_id:(\d+)
- used_cpu_sys:(\d+\.\d+)
- used_cpu_user:(\d+\.\d+)
- connected_clients:(\d+)
- connected_slaves:(\d+)
- used_memory_human:(\d+\.\d+[KMGTPEZY]?)
- role:(\w+)
# digest: 490a0046304402203601980eeccf44ef6a2d2618c6198fa2efd4cbc504caf3b8c0fdf99840330b8802203d030a47d8bfc92668c8e33248cf136937451e613d7f5c1cb01381e35ef2221a:922c64590222798bb761d5b6d8e72950