Post

Redeemer

Task 1

Which TCP port is open on the machine?

1
2
3
4
5
6
7
8
9
10
11
➜  nmap -sC -sV -p- -T4 10.129.161.156
Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-18 13:08 EDT
Nmap scan report for 10.129.161.156 (10.129.161.156)
Host is up (0.24s latency).
Not shown: 65534 closed tcp ports (reset)
PORT     STATE SERVICE VERSION
6379/tcp open  redis   Redis key-value store 5.0.7

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 1103.43 seconds

6379

Task 2

Which service is running on the port that is open on the machine?

Redis

Task 3

What type of database is Redis? Choose from the following options: (i) In-memory Database, (ii) Traditional Database

In-memory Database

Task 4

Which command-line utility is used to interact with the Redis server? Enter the program name you would enter into the terminal without any arguments.

Redis-cli

Task 5

Which flag is used with the Redis command-line utility to specify the hostname?

1
2
3
4
5
6
➜  redis-cli -h
redis-cli 6.0.16

Usage: redis-cli [OPTIONS] [cmd [arg [arg ...]]]
  -h <hostname>      Server hostname (default: 127.0.0.1).

-h

Task 6

Once connected to a Redis server, which command is used to obtain the information and statistics about the Redis server?

image

info

Task 7

What is the version of the Redis server being used on the target machine?

1
2
3
4
5
6
7
10.129.161.156:6379> info
# Server
redis_version:5.0.7
redis_git_sha1:00000000
redis_git_dirty:0
redis_build_id:66bd629f924ac924
redis_mode:standalone

5.0.7

Task 8

Which command is used to select the desired database in Redis?

image

select

Task 9

How many keys are present inside the database with index 0?

1
2
3
4
5
6
7
8
9
10
11
12
13
14
➜  startingpoint redis-cli -h 10.129.161.156
10.129.161.156:6379> keys *
1) "flag"
2) "numb"
3) "stor"
4) "temp"
10.129.161.156:6379> get flag
"03e1d2b376c37ab3f5319922053953eb"
10.129.161.156:6379> get numb
"bb2c8a7506ee45cc981eb88bb81dddab"
10.129.161.156:6379> get stor
"e80d635f95686148284526e1980740f8"
10.129.161.156:6379> get temp
"1c98492cd337252698d0c5f631dfb7ae"

4

Task 10

Which command is used to obtain all the keys in a database?

image

keys *

Submit Flag

Submit root flag

03e1d2b376c37ab3f5319922053953eb

Resources

This post is licensed under CC BY 4.0 by the author.

Comments powered by Disqus.