From a25a1824d6ea8ff47218548bc5d1730b668cea36 Mon Sep 17 00:00:00 2001 From: henri Date: Mon, 6 May 2013 21:00:45 +0000 Subject: [PATCH] Redis (at least v2.9.9) returns -NOAUTH to unauthenticated commands. --- scripts/redis-brute.nse | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/scripts/redis-brute.nse b/scripts/redis-brute.nse index 7baccc854..f8bbdffcc 100644 --- a/scripts/redis-brute.nse +++ b/scripts/redis-brute.nse @@ -84,11 +84,12 @@ local function checkRedis(host, port) end if ( redis.Response.Type.ERROR == response.type ) then - if ( "-ERR operation not permitted" == response.data ) then + if ( "-ERR operation not permitted" == response.data ) or + ( "-NOAUTH Authentication required." == response.data) then return true end end - + return false, "Server does not require authentication" end