Redis 4.0.14 listening without authentication: anyone can make it a replica of a rogue master, which sends a malicious module as the replication payload, then load that module to run commands.
Not startedDockercommit a0a1408x86_64 · aarch64Secret
Abuse the unauthenticated Redis 4.0.14 to run a command on the server.
The brief for this lab lives in its repository.