NoSQL Network Recon - Exercise No. 1

In Redis Server, the command to retrieve key-value differs by data type.


Here are the commands to retrieve the key value:

if the value is of type string,
GET <key>

if the value is of type hash,
HGETALL <key>

if  the value is of type lists,
lrange <key> <start> <end>

if the value is of type sets,
smembers <key>

if the value is of type sorted sets,
ZRANGEBYSCORE <key> <min> <max>


The command to check the type of value a key mapping to:
type <key>

Source:
https://www.attackdefense.com/
https://stackoverflow.com/questions/37953019/wrongtype-operation-against-a-key-holding-the-wrong-kind-of-value-php

MySQL Network Recon - Exercise No. 2

The command used to connect to a remote MySQL database.

MySQL [(none)]> show databases;

MySQL [data]> show tables;

root@% = allows connection from user 'root' from any host, local or TCP (internet).
root@localhost = only allows connection from 'root' on the machine running the MySQL server.

MySQL [information_schema]> select * from user_privileges where GRANTEE like '%\%%' ;

Sources : https://www.attackdefense.com/