Summary
Redis 未授权访问与利用。当发现目标开放 6379 端口、Redis 服务无认证或弱密码、需要从 Redis 获取敏感数据或实现远程命令执行时使用。覆盖未授权访问、数据窃取、crontab 写入 RCE、主从复制 RCE、模块加载 RCE、webshell 写入、SSH 公钥注入、Lua 脚本注入、Pub/Sub…
wgpsec/aboutsecurity
redis-attack
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
attack-path-analysis
Similar name
openai/codex-security
Use when Codex is already in the attack-path-analysis phase of a security scan or the user expl…
287 installs
attack-tree-construction
Similar name
wshobson/agents
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, …
11.9K installs
jwt-oauth-token-attacks
Similar name
yaklang/hack-skills
>- JWT and OAuth token attack playbook. Use when validating token trust, signing algorithms, ke…
3.1K installs
http-host-header-attacks
Similar name
yaklang/hack-skills
>- HTTP Host header injection and routing abuse playbook. Use when the application trusts the H…
2.9K installs
saml-sso-assertion-attacks
Similar name
yaklang/hack-skills
>- SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrappin…
2.9K installs
active-directory-kerberos-attacks
Similar name
yaklang/hack-skills
>- Kerberos attack playbook for Active Directory. Use when targeting AD authentication via AS-R…
2.9K installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 15 installs