Tags: networking network incidentresponse 

Rating:

Basic Enum

The HTTP traffic between the two IPs (victim and attacker) involved a lot of failed GET requests. So, I added to the filter to remove all GET requests and keep the source IP as 192.168.1.8.
Figure 9. Filter Results

One of the first packets should be a PUT command that involves a Nikto test file. Submit the Nikto as your answer to complete the challenge.