Redeemer

해당 문제는 HTB에서 공개 가능한 문제로 블로그에 라이트업 공개가 허용된 문제이므로 포스팅 합니다.

문제 개요

Redeemer는 매우 쉬운 난이도의 Linux 머신으로, Redis 데이터베이스 서버의 정보 수집(Enumeration)과 취약점 악용(Exploitation)을 다룬다. 또한 redis-cli 명령줄 도구와 Redis 서비스와 상호작용하기 위한 기본 명령어들을 소개한다.

TASK1

Which TCP port is open on the machine?

nmap -sV -T4 -p- 10.129.136.187 -v

6379

TASK2

Which service is running on the port that is open on the machine?

redis

TASK3

What type of database is Redis? Choose from the following options: (i) In-memory Database, (ii) Traditional Database

In-memory Database

TASK4

Which command-line utility is used to interact with the Redis server? Enter the program name you would enter into the terminal without any arguments.

redis-cli

TASK5

Which flag is used with the Redis command-line utility to specify the hostname?

-h

TASK6

Once connected to a Redis server, which command is used to obtain the information and statistics about the Redis server?

info

TASK7

What is the version of the Redis server being used on the target machine?

5.0.7

TASK8

Which command is used to select the desired database in Redis?

select

TASK9

How many keys are present inside the database with index 0?

INFO 명령어 결과 안에 존재함

4

TASK10

Which command is used to obtain all the keys in a database?

keys *

TASK11

Submit the flag located in the database.

GET flag

03e1d2b376c37ab3f5319922053953eb