Crosshairs 2 (Moderate):
While milling through some of the data
I decided to just follow the first tcp stream of the pcap in wireshark. The
first couple of requests you see being made to the webserver located at
172.16.150.20, the UA reveals a popular scanning tool known as Nikto is
being leveraged against it. After the initial GET request is made you can see a
response from the web server showing that it is running Apache/2.2.12 (Ubuntu),
PHP/5.2.10 and Joomla 1.5
I don't remember what the answer was
-exactly- but I'm pretty sure it was just "Joomla", could be wrong
though. Honestly I just guessed the answer at this point but you'll see in the next challenge why this is the right answer.
No comments:
Post a Comment