turbinia icon indicating copy to clipboard operation
turbinia copied to clipboard

Extend Redis analysis task

Open hacktobeer opened this issue 2 years ago • 0 comments

Add detection for below Redis vulnerability. https://nvd.nist.gov/vuln/detail/CVE-2022-0543 https://thehackernews.com/2022/03/muhstik-botnet-targeting-redis-servers.html

This might not be trivial as it has to do with the way Redis loads the Lua interpreter on certain Linux distributions. We might be able to find exploitation evidence in redis logs of cache files.

hacktobeer avatar Apr 05 '22 07:04 hacktobeer