HTB redeemer box walkthrough

Hey everyone!

I will cover solution steps of the “Redeemer” machine, which is part of the ‘Starting Point’ labs and has a difficulty rating of ‘Very Easy’.

Now, navigate to Redeemer machine challenge and download the VPN (.ovpn) configuration file and open a terminal window to run below mentioned command –

sudo openvpn [filename].ovpn

Note: [filename] should be replaced with the name of your downloaded .ovpn file for the Starting Point lab.

So, now let’s spawn the machine. And this is the interface that looks like after the machine gets spawned !!!

To solve available tasks run nmap scan on the [Target_IP] as shown below -

nmap -p- -sV target_ip

• p- option can be used to check all ports and if takes so much time, then use provided command “nmap -p- — min-rate 5000 -sV target_ip”

As per the nmap scan result, we will answer the following tasks-:

1. Which TCP port is open on the machine?
6379

2. Which service is running on the port that is open on the machine?
redis

Redis (REmote DIctionary Server) is an open-source advanced NoSQL key-value data store used as a database, cache, and message broker. The data is stored in a dictionary format having key-value pairs. The database is stored in the server’s RAM (in-memory) to enable fast data access. Redis also writes the contents of the database to disk at varying intervals to persist it as a backup, in case of failure.

3. What type of database is Redis? Choose from the following options: (i) In-memory Database, (ii) Traditional Database
In-memory Database

4. Which command-line utility is used to interact with the Redis server? Enter the program name you would enter into the terminal without any arguments.
redis-cli

To install redis-cli in Kali Linux use mentioned command — “sudo apt install redis-tools” and once installation is completed, use mentioned command confirm availability of tool and its usage — redis-cli — — help

5. Which flag is used with the Redis command-line utility to specify the hostname?
-h

6. Once connected to a Redis server, which command is used to obtain the information and statistics about the Redis server?
info

7. What is the version of the Redis server being used on the target machine?
5.0.7

8. Which command is used to select the desired database in Redis?
select

9. How many keys are present inside the database with index 0?
4

10. Which command is used to obtain all the keys in a database?
keys *

We can notice, flag file is present in the database so we will use get command to get the flag !

Copy the flag value and submit in browser to solve this machine -

You will receive message as “Redeemer has been Pwned” and Challenge solved successfully.