Redis 4.0.14 listening without authentication: anyone can make it a replica of a rogue master, which sends a malicious module as the replication payload, then load that module to run commands.
Pas commencéDockercommit a0a1408x86_64 · aarch64Secret
Abuse the unauthenticated Redis 4.0.14 to run a command on the server.
Le brief de ce lab se trouve dans son dépôt.