Collection of various web exploit methods (some solutions are attached)
Using redis to write webshell
Need to meet: 1. Redis can be accessed remotely; 2. Redis has no password; 3. Web service is running on the server; 4. Know the root directory of web service.
Http://www.jjsec.com/redis-getshell case sharing. Html
Http://www.secpulse.com/archives/5357.html
For the solution, please refer to the redis database security manual
Http://www.freebuf.com/articles/system/60654.html
