github/thc-hydra
1
0
Fork 0
mirror of https://github.com/vanhauser-thc/thc-hydra.git synced 2025-07-05 20:41:39 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update hydra-redis.c

Browse source
This commit is contained in:
Petar Kaleychev 2016-10-11 21:28:24 +03:00 • committed by GitHub
parent 402cc0934e
commit 3658f3a6ad
1 changed files with 30 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

41
hydra-redis.c
View file

@ -10,7 +10,15 @@ int start_redis(int s, char *ip, int port, unsigned char options, char *miscptr,
if (strlen(pass = hydra_get_next_password()) == 0) if (strlen(pass = hydra_get_next_password()) == 0)
pass = empty; pass = empty;
sprintf(buffer, "AUTH %.250s\r\n", pass); char pass_num[50];
int pass_len = strlen(pass);
snprintf(pass_num, 50, "%d", pass_len);
memset(buffer, 0, sizeof(buffer));
sprintf(buffer, "*2\r\n$4\r\nAUTH\r\n$%.250s\r\n%.250s\r\n", pass_num, pass);
if (debug)
hydra_report(stderr, "[DEBUG] Auth:\n %s\n", buffer);
if (hydra_send(s, buffer, strlen(buffer), 0) < 0) { if (hydra_send(s, buffer, strlen(buffer), 0) < 0) {
return 1; return 1;
@ -21,14 +29,24 @@ int start_redis(int s, char *ip, int port, unsigned char options, char *miscptr,
hydra_completed_pair_found(); hydra_completed_pair_found();
free(buf); free(buf);
if (memcmp(hydra_get_next_pair(), &HYDRA_EXIT, sizeof(HYDRA_EXIT)) == 0) if (memcmp(hydra_get_next_pair(), &HYDRA_EXIT, sizeof(HYDRA_EXIT)) == 0)
return 3; return 4;
return 1; return 1;
} }
if (verbose > 1) if (buf[0] == '-') {
hydra_report(stderr, "[VERBOSE] Authentication failed for password %s\n", pass); if (verbose > 1)
hydra_completed_pair(); hydra_report(stderr, "[VERBOSE] Authentication failed for password %s\n", pass);
hydra_completed_pair();
free(buf); free(buf);
if (memcmp(hydra_get_next_pair(), &HYDRA_EXIT, sizeof(HYDRA_EXIT)) == 0)
return 4;
return 2;
} else {
hydra_report(stderr, "[ERROR] Redis service shutdown.\n");
free(buf);
return 3;
}
+ /* not reached */
return 1; return 1;
} }
@ -72,6 +90,7 @@ void service_redis_core(char *ip, int sp, unsigned char options, char *miscptr,
if (sock >= 0) if (sock >= 0)
sock = hydra_disconnect(sock); sock = hydra_disconnect(sock);
hydra_child_exit(2); hydra_child_exit(2);
break;
case 4: /* clean exit */ case 4: /* clean exit */
if (sock >= 0) if (sock >= 0)
sock = hydra_disconnect(sock); sock = hydra_disconnect(sock);
@ -95,7 +114,7 @@ void service_redis(char *ip, int sp, unsigned char options, char *miscptr, FILE
* You can use redis-cli to connect with Redis. After start of the redis-server in another terminal the following: * You can use redis-cli to connect with Redis. After start of the redis-server in another terminal the following:
* % ./redis-cli * % ./redis-cli
* redis> ping * redis> ping
* when the server do not require password, leads to: * when the server does not require password, leads to:
* PONG * PONG
* when the server requires password, leads to: * when the server requires password, leads to:
* (error) NOAUTH Authentication required. * (error) NOAUTH Authentication required.
@ -109,7 +128,7 @@ int service_redis_init(char *ip, int sp, unsigned char options, char *miscptr, F
// performed once only. // performed once only.
// return codes: // return codes:
// 0 - when the server is redis and it requires password // 0 - when the server is redis and it requires password
// 1 - when the server is not redis or when the server do not require password // 1 - when the server is not redis or when the server does not require password
int sock = -1; int sock = -1;
int myport = PORT_REDIS, mysslport = PORT_REDIS_SSL; int myport = PORT_REDIS, mysslport = PORT_REDIS_SSL;
@ -149,8 +168,8 @@ int service_redis_init(char *ip, int sp, unsigned char options, char *miscptr, F
if (debug) if (debug)
printf("[DEBUG] buf = %s\n", buf); printf("[DEBUG] buf = %s\n", buf);
// authentication test // authentication test
if (strstr(buf, "+PONG") != NULL) { // the server do not require password if (strstr(buf, "+PONG") != NULL) { // the server does not require password
hydra_report(stderr, "[!] The server do not require password.\n"); hydra_report(stderr, "[!] The server does not require password.\n");
free(buf); free(buf);
return 1; return 1;
} }