Skip to content

redis-info script does not talk TLS #2852

@digininja

Description

@digininja

Describe the bug
One for @patrikkarlsson or @segoon. The redis-info script doesn't talk TLS so it can't be used against a redis server which only supports TLS based connections.

To Reproduce

The server only allows connections over TLS:

└─$ redis-cli --scan --pattern '*' --tls  -h 10.1.0.1 
info...

When scanning with the script, no data is retrieved:

└─$ nmap --script redis-info 10.3.0.43  -Pn -p 6379 -n
Starting Nmap 7.93 ( https://nmap.org ) at 2024-05-23 09:30 UTC
Nmap scan report for 10.1.0.1
Host is up (0.00075s latency).

PORT     STATE SERVICE
6379/tcp open  redis

Nmap done: 1 IP address (1 host up) scanned in 30.24 seconds

Expected behavior
The script should try clear text first and then if it can't get anything, try a TLS connection.

Version info (please complete the following information):

└─$ nmap -V
Nmap version 7.93 ( https://nmap.org )
Platform: x86_64-pc-linux-gnu
Compiled with: liblua-5.3.6 openssl-3.2.2-dev libssh2-1.10.0 libz-1.2.13 libpcre-8.39 nmap-libpcap-1.7.3 nmap-libdnet-1.12 ipv6
Compiled without:
Available nsock engines: epoll poll select

redis-info script version

-- 6379/tcp open  unknown
-- | redis-info:
-- |   Version            2.2.11

Additional context
Add any other context about the problem here, such as special network type.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions