Antoine Guy aguy

## Redis CVE-2015-4335 EVAL Lua Sandbox Security Bypass Vulnerability PoC
#!/usr/bin/env python
# https://www.reddit.com/r/netsec/comments/4a93eo/analysis_of_vm_escape_by_using_lua_script/d0zcsgl

import sys
import time
import getopt
import socket

'''
Gives the hexadecimal representation of "command"

## README.md

      
              2 files
            
          
              2 forks
            
          
              1 comment
            
          
              8 stars
            
          
                jssjr
                / README.md
            
            
              Created
              October 25, 2013 18:27
            
              
                Graphite is great, but unfortunately the web UI itself isn't instrumented. (Yo dawg, I heard you like graphite.) Enable the directives to log render and cache performance, then monitor this with collect's tail plugin so you can visualize graphite performance.
              
          
## gist:4137531
#!/usr/bin/env ruby

hits_ = nil
misses_ = nil

loop do
  `redis-cli info | grep keyspace` =~ /hits:(\d+).*misses:(\d+)/m
  hits, misses = $1.to_i, $2.to_i

  if hits_
	#!/usr/bin/env python
	# https://www.reddit.com/r/netsec/comments/4a93eo/analysis_of_vm_escape_by_using_lua_script/d0zcsgl

	import sys
	import time
	import getopt
	import socket

	'''
	Gives the hexadecimal representation of "command"
	#!/usr/bin/env ruby

	hits_ = nil
	misses_ = nil

	loop do
	`redis-cli info \| grep keyspace` =~ /hits:(\d+).*misses:(\d+)/m
	hits, misses = $1.to_i, $2.to_i

	if hits_