diff --git a/pentesting/6379-pentesting-redis.md b/pentesting/6379-pentesting-redis.md index 4fd784dd..8ea4d812 100644 --- a/pentesting/6379-pentesting-redis.md +++ b/pentesting/6379-pentesting-redis.md @@ -43,9 +43,9 @@ In this last case, this means that **you need valid credentials** to access the ### Redis Authentication -**By default** Redis can be accessed **without credentials**. However, it can be **configured** to support **only password or username + password**. +**By default** Redis can be accessed **without credentials**. However, it can be **configured** to support **only password, or username + password**. It is possible to **set a password** in _**redis.conf**_ file with the parameter `requirepass` **or temporary** until the service restarts connecting to it and running: `config set requirepass p@ss$12E45`. -Also, a username can be configured in the parameter `masteruser` inside the _**redis.conf**_ file. +Also, a **username** can be configured in the parameter `masteruser` inside the _**redis.conf**_ file. {% hint style="info" %} If only password is configured the username used is "**default**".