We can perform the credential check using -id flag follows by the username and password. We need to use -mutate flag with option 3 for the task to enumerate usernames and files in Apache server. Task 2-6: Flag used to guess and test username in APACHE dbcheck is used to identify the Nikto’s vulnerable database, Always update your Nikto database using -update. Task 2-5: Flag for identifying the integrity of the vulnerable database Similarly, this task got two answers which are -p or -port. A non-secure transport port also known as non-secure socket layer (NoSSL). Task 2-2: Flag for scanning non-secure transport Actually, it doesn’t matter, as long as you learned it. However, challenger only can input -h to the answer field. If the help menu is confused, you are welcome to use Nikto cheat sheet. Every answer to this task is on the help menu. If you are unfamiliar with the flag, remember, always use -H and –help (simplified help menu) to help you up. This task required the user to familiar with the use of Nikto web scanner tool. Multiple tools always work better than a single tool. As the old-timer said, two is better than one. In summary, Nikto works best for reconnaissance while OWASP ZAP for webserver vulnerability analysis. Task 1: Nikto and OWASP ZAPīoth Nikto and OWASP ZAP run webserver scanning while Nikto runs in the shell and OWASP run-in GUI format. This gives me the inspiration to shout out my opinion and the need to spread the knowledge.

In addition, I was surprised that some of the challenges are not able to complete the task, so far only 26 out of 86 people completed the room (about 30%).

That is why I called this write up as a tutorial instead of a walkthrough. This write-up is a little bit different compared to my other CTF challenge. Today, I going to do a tutorial write-up for two web scanning application namely Nikto and OWASP ZAP on tryhackme. 7 August 2020 THM write-up: RP Web Scanning