Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cnvd_2015_07557 redis未授权访问靶场的问题 #346

Open
mjkmoukip opened this issue Oct 4, 2023 · 0 comments
Open

cnvd_2015_07557 redis未授权访问靶场的问题 #346

mjkmoukip opened this issue Oct 4, 2023 · 0 comments
Labels
bug Something isn't working

Comments

@mjkmoukip
Copy link

根据cnvd_2015_07557的描述,这个未授权访问漏洞应该是通过写入公钥完成的,但是这个容器却没有写入root的权限,home里也没有文件;22端口也并未开启。
writeup是通过主从复制getshell的,但这理应是cnvd-2019-21763的解决方案,而不是应该是cnvd_2015_07557的。
两个不同的靶场却只能用相同的getshell,所以我认为这个靶场是不合理的。

@mjkmoukip mjkmoukip added the bug Something isn't working label Oct 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant