10.129.136.187

Task 1 – Which TCP port is open on the machine?

Scanned the target with “”nmap -A -p- 10.129.136.187””.

A: 6379

Task 2 – Which service is running on the port that is open on the machine?

A: redis

Task 3 – What type of database is Redis? Choose from the following options: (i) In-memory Database, (ii) Traditional Database

Knew this from previous knowledge.

A: In-memory Database

Task 4 – Which command-line utility is used to interact with the Redis server? Enter the program name you would enter into the terminal without any arguments.

Think I learned this from a TryHackMe box in the past.

A: redis-cli

Task 5 – Which flag is used with the Redis command-line utility to specify the hostname?

A: -h 

Task 6 – Once connected to a Redis server, which command is used to obtain the information and statistics about the Redis server?

A: INFO

Task 7 – What is the version of the Redis server being used on the target machine?

Besides “”info””, Nmap results also gave us this.

A: 5.0.7

Task 8 – Which command is used to select the desired database in Redis?

A: SELECT

Task 9 – How many keys are present inside the database with index 0?

It skipped a few important parts here but to list databases you’ll need to run “”CONFIG GET databases””. That listed “databases” and “16”. To see what’s inside you can select and run “”KEYS *””. I didn’t find anything in those but the question mentioned index 0 anyways. Selected that, listed keys and we get 4 results.

Task 10 – Which command is used to obtain all the keys in a database?

The questions seem like in a weird order if you had no previous knowledge of interacting with redis but luckily I have.

A: KEYS *

Submit Flag:

To actually read the file, you’ll need to use “”GET””

A: 03e1d2b376c37ab3f5319922053953eb

10.129.1.12

Task 1 –  What does the 3-letter acronym SMB stand for?

Previous knowledge

A: Server Message Block

Task 2 – What port does SMB use to operate at?

A: 445

Task 3 – What is the service name for port 445 that came up in our Nmap scan? 

Definitely don’t know this off the top of my head so I’ll scan it.

A: microsoft-ds

Task 4 – What is the ‘flag’ or ‘switch’ that we can use with the smbclient utility to ‘list’ the available shares on Dancing?

Back to some previous knowledge of already using these tools. Just remember though this switch needs to exist before the IP for it to work properly. That took me a bit to realize that I was messing up my commands.

Hitting enter twice I was able to log in anonymously.

A: -L

Task 5 – How many shares are there on Dancing?

A: 4

Task 6 – What is the name of the share we are able to access in the end with a blank password?

A: WorkShares

Task 7 – What is the command we can use within the SMB shell to download the files we find?

A: get

Submit Flag: 

Connected anonymously to this share and there are two directories in there.

Enumerated the directories and found a flag.txt and worknotes.txt.

 Using “”get”” I downloaded both files on my device and read them.

A: 5f61c10dffbc77a704d76016a22f1664

https://app.hackthebox.com/machines/Meow

10.129.1.17

Task 1 – What does the acronym VM stand for?

A: Virtual Machine

Task 2 – What tool do we use to interact with the operating system in order to issue commands via the command line, such as the one to start our VPN connection? It’s also known as a console or shell.

A: terminal

Task 3 – What service do we use to form our VPN connection into HTB labs?

I just know this from clicking around in HackTheBox

A: openvpn

Task 4 – What tool do we use to test our connection to the target with an ICMP echo request?

I use this everyday

A: ping

Task 6 – What is the name of the most common tool for finding open ports on a target?

A: nmap

Task 7 – What service do we identify on port 23/tcp during our scans?

A: telnet

I knew all the previous questions from past experience.

Submit Flag

Started up the machine. Following the questions I nmap scanned it anyway and only receive port 23 open

Attempted to connect to that port to see if it had anything interesting and received a log in. 

I attempted admin:admin, meow:meow, cat:cat and other iterations of that which did not work. I was confused for a second, but after looking through the questions I ended up using root and it got me in.

A: b40abdfe23665f766f9c61ecba8a4c19

Welcome to my website! This is my very first post, and I’m excited to start sharing ideas, projects, and updates here. Stay tuned for more content coming soon!