07_Lessons_Learned

📝 Final Report & Lessons Learned

1. Executive Summary

Redeemer is a Tier 0 machine that emphasizes the importance of securing database services. It demonstrates how a lack of authentication on a common service like Redis can lead to immediate data exposure.

---

2. Key Takeaways

• Technical takeaways: Redis does not have authentication enabled by default in many older or default installations. rustscan is highly effective for finding ports that nmap might miss on a standard top-1000 scan.
• Strategic takeaways: Full port scans (65535) are essential when standard scans yield no results.

---

3. Remediation

1. Enable Authentication: Configure Redis with a strong password using the requirepass directive in redis.conf.
2. Bind to Localhost: If exterior access is not required, ensure Redis is only listening on 127.0.0.1.
3. Change Default Port: Moving Redis to a non-standard port can help avoid simple automated scans.

---

4. Skills Gained

• Full Port Scanning with rustscan
• Redis Service Enumeration
• Basic redis-cli Operations
• Unauthenticated Database Access

---

Operations

🏆 Back to HTB Dashboard →