Redis Cluster Takeover Detection
redis-cluster-takeover is a critical severity check in the
databases category, written in go.
Its source is templates/databases/redis/redis-cluster-takeover.go in
cert-x-gen-templates.
What it checks
Section titled “What it checks”Detects Redis Cluster misconfiguration allowing unauthorized cluster manipulation via CLUSTER MEET and slot reassignment. Tests both standard port (6379) and cluster bus port (16379).
Header
Section titled “Header”| Field | Value |
|---|---|
| Id | redis-cluster-takeover |
| Severity | critical |
| Language | go |
| Category | databases |
| Author | BugB Technologies |
| Template version | not recorded |
| Confidence | 95 |
| CVSS | not recorded |
| Weakness | CWE-306 |
| Tags | redis, cluster, takeover, cve-2024-redis, misconfiguration, protocol-abuse, unauth |
| Target kind | not recorded |
| Oracle | not recorded |
References
Section titled “References”Declared in the header. cxg parses @references and then discards it, and
nothing at scan time reads it, so this is the only place the links a
template cites are surfaced.
- https://redis.io/docs/management/scaling/
- https://book.hacktricks.xyz/network-services-pentesting/6379-pentesting-redis
Run it
Section titled “Run it”To see what the copy on your machine says about itself, and to confirm it is installed at all:
cxg template info redis-cluster-takeoverThe id it prints is the one to pass anywhere a template is selected. See
cxg template for the rest of
the subcommand, Scan a target for running
a scan, and
A match is not a finding for how
to read what comes back.
Related
Section titled “Related”- Template catalog is the whole corpus.
- databases is the rest of this category.
- Templates by weakness class groups checks by the defect they look for.
- Contribute a template is the route from a check you needed and could not find to a merged one.