Add a minion to scan redis configuration

google / minions

Distributed filesystem scanner

Apache License 2.0

130 stars 12 forks source link

Closed paradoxengine closed 6 years ago

paradoxengine commented 6 years ago

Seems like a configuration scanner would be a good idea, and redis might be a good start. We could check for:

world readable config file (since it stores the password)
requirepass (maybe in conjunction with being bound to something other than localhost)
- presence of rename command for CONFIG (though, this seems like hardening?)

paradoxengine commented 6 years ago

I think this is an OK first implementation. Closing.