| Section | Description |
|---|---|
| Target IP | 172.17.0.2 |
| Target Host | Unknown |
| OS | Linux |
| Kernel Version | Unknown |
| Web Application/Sercvice | Apache httpd 2.4.41 (Ubuntu) |
| Application Version | Apache 2.4.41 |
| Open Ports | 22 (SSH),80/tcp (HTTP) |
| Test Methodology | Black-box |
| Test Date | 7/27/2026 |
An nmap scan was performed to identify open ports and surfaces
nmap -sC -sV 172.17.0.2
Open Ports:
Upon accessing the site, a static page is displayed with the title The Walking Dead - CTF .
URL -> <http://172.17.0.2>
Reviewing the page's source code reveals a hidden link to a panel:
<ahref="hidden/.shell.php">Access Panel</a>
Gobuster also performs brute-force attacks on directories and files:
gobuster dir -u <http://172.17.0.2:80> \
-w /usr/share/seclists/Discovery/Web-Content/common.txt \
-x html,zip,php,txt \
-b 404 -t 60
Among the resources found, the following stand out:
| Resource | Code | Comment |
|---|---|---|
/index.html |
200 | Homepage |
/backup.txt |
200 | Exposed file |
/hidden/ |
200 | Hidden directory |
The hidden link points to: