Lab Access: https://tryhackme.com/room/vulnerabilitycapstone

Task 1: Introduction

Ackme Support Incorporated recently launched a new blog. Their developer team has requested a security audit before creating and publishing content to the public.

It is your responsibility to do a security audit on the blog, looking for and exploiting any vulnerabilities that you discover.

[Question 1.1] Let’s get hacking

Answer: No answer is needed.

Task 2: Exploit the Machine (Flag Submission)

[Question 2.1] Deploy the vulnerable machine attached to this task & wait five minutes before visiting the vulnerable machine.

Answer: No answer is needed.

[Question 2.2] What is the name of the application running on the vulnerable machine?

Answer: Fuel CMS

[Question 2.3] What is the version number of this application?

Answer: 1.4

[Question 2.4] What is the number of the CVE that allows an attacker to remotely execute code on this application? (Format: CVE-XXXX-XXXXX)