Databases & cachesTCP 6379 Cleartext by default
Port 6379: Redis
Redis
In-memory data store. Historically shipped with no authentication by default.
How attackers abuse it
- Unauthenticated instances on the internet abused for data theft or to write SSH keys and cron jobs.
How to defend it
- Bind to localhost or private networks; enable protected mode, ACLs and TLS.
Exam tip
Default-open data stores (Redis, MongoDB, Elasticsearch) are a recurring breach cause.