turbinia
turbinia copied to clipboard
Extend Redis analysis task
Add detection for below Redis vulnerability. https://nvd.nist.gov/vuln/detail/CVE-2022-0543 https://thehackernews.com/2022/03/muhstik-botnet-targeting-redis-servers.html
This might not be trivial as it has to do with the way Redis loads the Lua interpreter on certain Linux distributions. We might be able to find exploitation evidence in redis logs of cache files.