Post

Redeemer

Enumerations

Nmap scan

1
nmap -sV -p- -vv -oN nmap_scans redeemer.htb

Alt text a single port was open after a 1hr of scan or soo

exploiting Redis key-value store 5.0.7

To try to connect to the Redis server we can use redis-cli with -h flag followed by IP address or with nc

1
2
redis-cli -h redeemer.htb

or

1
nc -vn < ip address > 6379

Alt text

Checking at the key space we have a database 0

Alt text

After using the select command and getting all the keys we had a flag there Alt text

To read the file content of the flag we just use get <KEY> Alt text

Reference

This post is licensed under CC BY 4.0 by the author.