> For the complete documentation index, see [llms.txt](https://ret2basic.gitbook.io/ctfnote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ret2basic.gitbook.io/ctfnote/web/csrf-and-ssrf/server-side-request-forgery-ssrf/ssrf-+-redis.md).

# SSRF + Redis

## SSH Public Key

`$HOME/.ssh/authorized_keys` is used to store a list of SSH public keys so that users log in without password. If `$HOME/.ssh/authorized_keys` is writable, this can be used to store the attacker's SSH public key.

## Reference

{% embed url="<https://infosecwriteups.com/exploiting-redis-through-ssrf-attack-be625682461b>" %}
Exploiting Redis Through SSRF Attack
{% endembed %}