Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
redis-dumper
Advanced tools
Parallel processing through go routines, copy and delete thousands of key within some minutes
go install
brew tap appit-online/redis-dumper https://github.com/appit-online/redis-dumper
brew install redis-dumper
Source, destination - can be provided as just <host>:<port>
or in Redis URL format: redis://[:<password>@]<host>:<port>[/<dbIndex>]
Pattern - can be glob-style pattern supported by Redis SCAN command.
redis-dumper migrate <source> <destination> --pattern="prefix:*" --sourcePassword="SourcePassword" --targetPassword="TargetPassword"
--sourceUseTLS bool "Enable TLS for source Redis" (default true)
--targetUseTLS bool "Enable TLS for target Redis" (default true)
--logInterval int "Print current status every N seconds" (default 1)
--scanCount int "COUNT parameter for redis SCAN command" (default 1000)
--parallelDumps int "Number of parallel dump goroutines" (default 100)
--pushRoutines int "Number of parallel restore goroutines" (default 100)
redis-dumper delete <redis> --pattern="prefix:*" --password="Password"
--useTLS bool "Enable TLS" (default true)
--logInterval int "Print current status every N seconds" (default 1)
--scanCount int "COUNT parameter for redis SCAN command" (default 1000)
--parallelDeletes int "Number of parallel delete goroutines" (default 100)
redis-dumper generate <redis> --password="Password"
--useTLS bool "Enable TLS" (default true)
--prefixes []string "List of prefixes for generated keys" (default {"mykey:", "testkey:"})
--prefixAmount []string "Amount of keys to create for each prefix in one iteration" (default {"1", "2"})
--entryCount int "Iteration count to perform" (default 1)
Is performed with a single goroutine, scanned keys are sent to channel
X export goroutines are consuming keys and perform DUMP
and PTTL
as a pipeline command
Results are sent to another channel, where another Y push goroutines are performing RESTORE
/REPLACE
command on the destination instance
A goroutine outputs status every T seconds
FAQs
CLI to migrate redis data from one instance to another, delete data by pattern and create new dummy data in seconds
The npm package redis-dumper receives a total of 0 weekly downloads. As such, redis-dumper popularity was classified as not popular.
We found that redis-dumper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.