Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Vulnerability Scanning - Advanced Nmap NSE
Mission
Analyze the vulnerability-scan report `scan_results/nmap_scan.nmap`. Most Nmap NSE `vuln` results are `NOT VULNERABLE` or informational decoys, but exactly one is `State: VULNERABLE (Exploitable)`. Read the `FLAG:` line in that confirmed-vulnerable service's block (the AJP Ghostcat / CVE-2020-1938 service).
Hints
Hint 1 Show
Review the NSE vuln script results in nmap_scan.nmap; most are NOT VULNERABLE or informational decoys
Hint 2 Show
There is exactly one State: VULNERABLE (Exploitable)
Hint 3 Show
The flag (FLAG:) is in that confirmed-vulnerable service's block