PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-17 05:09:00 +00:00
Code Issues Projects Releases Wiki Activity

Redis (at least v2.9.9) returns -NOAUTH to unauthenticated commands.

Browse Source
This commit is contained in:
henri
2013-05-06 21:00:45 +00:00
parent 0f47a16746
commit a25a1824d6
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
scripts/redis-brute.nse
View File

@@ -84,11 +84,12 @@ local function checkRedis(host, port)
end end
if ( redis.Response.Type.ERROR == response.type ) then if ( redis.Response.Type.ERROR == response.type ) then
if ( "-ERR operation not permitted" == response.data ) then if ( "-ERR operation not permitted" == response.data ) or
( "-NOAUTH Authentication required." == response.data) then
return true return true
end end
end end
return false, "Server does not require authentication" return false, "Server does not require authentication"
end end