search

swisskyrepo / SSRFmap

Automatic SSRF fuzzer and exploitation tool
MIT License
2.99k stars 521 forks source link

Redis module #14

Closed Techbrunch closed 5 years ago

Techbrunch commented 5 years ago

Hello,

Currently the Redis module won't work if the size of SERVER_HOST or SERVER_PORT differs from the hardcoded values.

This is because the current payload has a hardcoded value of 64 inside.

You can check how it's done in Gopherus if you want to fix this issue: https://github.com/tarunkant/Gopherus/blob/master/scripts/Redis.py

swisskyrepo commented 5 years ago

Hi,

This should be fixed by https://github.com/swisskyrepo/SSRFmap/commit/12c13aa2f2e9c5c0da08daa55603d94c933fb75d#diff-38f24b7d7f8bb04385cbc9feaacb7e72

Thank you :)