HackBlue

Labs / Web server logs

A scanner found one real file

Most of a scanner’s requests return 404. Find the scanner in the access log by its 404 count, name the tool from its user agent, and find the one path that returned 200.

  • Terminal mission
  • Beginner
  • 3 objectives
  • 0 of 3 solved

Briefing

The marketing site on www-01 saw a short burst of odd requests this morning. Scanners make a lot of noise, and the noise is not the problem. The problem is any path that answered.

The log is in combined format: $1 is the client address, $7 the path, $9 the status, and $10 the response size.

analyst@www-01

www-01 · Web server logs

Type help for the command list and objectives for your tasks. Everything runs in this browser.

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.