Redis Credentials

Description

General

• Documentation: https://redis.io/documentation
• Summary: Redis is a distributed in-memory key-value database. These detectors aim at catching Redis credentials consisting of a host, port, username and password in a connection URI string, in an assignment form or in a CLI command.

Revoke the secret

Redis supports the DELUSER command to both delete the specified users and terminate all their connections.

Details for Redis Credentials

• Family: identifiers

• Category: data_storage

• Company: Redis

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 3

• Occurrences found for one million commits: 8.12

• Prefixed: False

Details for Redis URI

• Family: identifiers

• Category: data_storage

• Company: Redis

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 5

• Occurrences found for one million commits: 10.01

• Prefixed: True

Details for Redis CLI Credentials

• Family: identifiers

• Category: data_storage

• Company: Redis

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 0.36

• Prefixed: False