Tags: networking network incidentresponse
Rating:
Basic Enum
The HTTP traffic between the two IPs (victim and attacker) involved a lot of failed GET requests. So, I added to the filter to remove all GET requests and keep the source IP as 192.168.1.8.
Figure 9. Filter Results
One of the first packets should be a PUT command that involves a Nikto test file. Submit the Nikto as your answer to complete the challenge.