A Redis RDP Port Heist: Every Hacker Should Know This

Target: mystery.metaproblems.com

Let's scan it.

I run simple nmap scan 1st blocks so i use -Pn

Wait… Redis on port 3389? I knew Redis normally runs on 6379! This was unexpected.

Now I knew it was Redis. I needed to connect.

What is Redis?

Redis is an open-source, in-memory key-value store used as a database, cache, and message broker. It stores data in RAM for extremely fast performance and supports data types like strings, lists, sets, and hashes. Example: SET name "John" stores data, GET name retrieves it.

redis-cli is the command-line tool to interact with Redis. Example: redis-cli -h host -p port

Inside Redis, I started exploring and got flag: