Redis
An in-memory data store used for caching and queues.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- Framework
- Web Server
- Runtime
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- DataRedis
About
Redis is a very fast in-memory data store used for caching, sessions and queues, listening on port 6379. It has no password by default and is built for trusted networks, so an exposed Redis is often a quick route in. It runs on Linux, and on Windows only under WSL2 or as Memurai, a compatible version from a Redis partner.
How to Spot It
These are signs that a system runs Redis, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Default port
6379 (Redis)- Response
+PONG in reply to the PING command
If It Has a Flaw
Without a password, Redis trusts whoever can connect, so an exposed instance leaks its data and can be made to write files that run code. Keep it off the public network.
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach Redis.
