-
Notifications
You must be signed in to change notification settings - Fork 2.7k
Closed
Labels
Description
Describe the bug
One for @patrikkarlsson or @segoon. The redis-info script doesn't talk TLS so it can't be used against a redis server which only supports TLS based connections.
To Reproduce
The server only allows connections over TLS:
└─$ redis-cli --scan --pattern '*' --tls -h 10.1.0.1
info...
When scanning with the script, no data is retrieved:
└─$ nmap --script redis-info 10.3.0.43 -Pn -p 6379 -n
Starting Nmap 7.93 ( https://nmap.org ) at 2024-05-23 09:30 UTC
Nmap scan report for 10.1.0.1
Host is up (0.00075s latency).
PORT STATE SERVICE
6379/tcp open redis
Nmap done: 1 IP address (1 host up) scanned in 30.24 seconds
Expected behavior
The script should try clear text first and then if it can't get anything, try a TLS connection.
Version info (please complete the following information):
└─$ nmap -V
Nmap version 7.93 ( https://nmap.org )
Platform: x86_64-pc-linux-gnu
Compiled with: liblua-5.3.6 openssl-3.2.2-dev libssh2-1.10.0 libz-1.2.13 libpcre-8.39 nmap-libpcap-1.7.3 nmap-libdnet-1.12 ipv6
Compiled without:
Available nsock engines: epoll poll select
redis-info script version
-- 6379/tcp open unknown
-- | redis-info:
-- | Version 2.2.11
Additional context
Add any other context about the problem here, such as special network type.