
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Inspired by pyredis-dump
Build on top of ioredis, so it's offer all ioredis features
npm i -g redis-drs
redis-drs dump --filePath dump.csv --uri redis://localhost:6379/0 --pattern 'username:*'
redis-drs restore --filePath dump.csv --uri redis://localhost:6380/0
redis-drs sync --sourceUri redis://localhost:6379/0 --targetUri redis://localhost:6380/0
# For help
redis-drs dump --help
npm i -S redis-drs
import { RedisDRS } from 'redis-drs';
const redis = new RedisDRS({ path: 'redis://localhost:6379/0' });
const data = redis.dump({ filePath: 'dump.csv', pattern: 'username:*' });
// Total keys is always the first item in the iterator
const total = (await data.next()).value as number;
console.log(`Total keys: ${total}`);
for await (const val of data) {
// Here you can reach data stream copy
}
redis.disconnect();
import { RedisDRS } from 'redis-drs';
const redis = new RedisDRS({ path: 'redis://localhost:6379/0' });
const data = await redis.restore({
filePath: 'dump.csv',
useTtl: true,
bulkSize: 1000,
});
// Total keys is always the first item in the iterator
const total = (await data.next()).value as number;
console.log(`Total keys: ${total}`);
for await (const val of data) {
// Here you can reach data stream copy
}
redis.disconnect();
import { RedisDRS } from 'redis-drs';
const redis = new RedisDRS({ path: 'redis://localhost:6379/0' });
const data = await redis.sync({
targetRedisOptions: { path: 'redis://localhost:6380/0' },
pattern: 'username:*',
useTtl: true,
});
// Total keys is always the first item in the iterator
const total = (await data.next()).value as number;
console.log(`Total keys: ${total}`);
for await (const val of data) {
// Here you can reach data stream copy
}
redis.disconnect();
FAQs
redis-drs - A Redis Dump, Restore and Sync Tool
The npm package redis-drs receives a total of 16 weekly downloads. As such, redis-drs popularity was classified as not popular.
We found that redis-drs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.