0%

HTB-Redeemer靶机渗透

Task1

Which TCP port is open on the machine?

问哪个TCP端口是开放的,用fscan扫描,fscan -h能扫出来有一个端口是6379

image-20260209193917346

显而易见这题答案是6379

Task2

Which service is running on the port that is open on the machine?

问什么服务在端口上运行,根据fscan的扫描结果,是redis

那答案就是redis

Task3

What type of database is Redis? Choose from the following options: (i) In-memory Database, (ii) Traditional Database

问redis的数据库类型,这里是In-memory database

也就是内存数据库

Task4

Which command-line utility is used to interact with the Redis server? Enter the program name you would enter into the terminal without any arguments.

问哪个命令行工具用来与redis服务器交互,经常用redis-cli

Task5

Which flag is used with the Redis command-line utility to specify the hostname?

问Redis工具命令行使用哪个标志指定主机名,这里是-h

Task6

Once connected to a Redis server, which command is used to obtain the information and statistics about the Redis server?

连接Redis服务器后,使用哪条命令获取Redis服务器的信息和统计信息?

info命令能查看

image-20260209200540859

Task7

What is the version of the Redis server being used on the target machine?

问redis什么版本,根据info命令的回显结果,5.0.7

Task8

Which command is used to select the desired database in Redis?

在Redis中哪个命令是用来选择所需的数据库?

select

image-20260209201354380

这里select 0是代表选择索引为0的数据库

Task9

How many keys are present inside the database with index 0?

问索引为0的数据库里面有多少个键,这里根据info命令看到有四个键

image-20260209201802888

Task10

Which command is used to obtain all the keys in a database?

问什么命令可以查看所有的键,用keys *能查看

image-20260209201937453

Submit root flag

看到flag键了,直接get就可以

image-20260209202129908