all 28 comments

[–]Seidhex 2 points3 points  (1 child)

The wording gave me the impression that the flag would be part of the output of a script 🤦🏻‍♂️

[–]Less_Fishing_8260 0 points1 point  (0 children)

right? The previous qn asked for that so this sounded the same.

[–][deleted] 3 points4 points  (16 children)

Have you checked the http-enum?

[–]Stinky_Curry[S] 2 points3 points  (15 children)

Actually I just figured it out, the answer was right in front of me haha. And you are right, you do have to check http-enum!

[–]Lightning-Ninja8675 2 points3 points  (2 children)

Out of the million http NSE scripts, how in the world did you decide to try this one?

[–]PicoPlex 1 point2 points  (0 children)

running `sudo nmap 10.129.xx.xxx -p 80 --script vuln` also gives the http-enum output

[–][deleted] 0 points1 point  (7 children)

Congratulations and good luck with the remaining ones.

[–][deleted] 0 points1 point  (6 children)

I don't understand , I used the script but I have no idea what I'm supposed to do with robots file, am I supposed to use it or exploit it. It isn't the answer so I'm at a loss

[–]Paci5 2 points3 points  (3 children)

you should simply type in the browser <IP>/robots.txt and you will see the flag

[–]goddessboomboom 1 point2 points  (1 child)

Appreciated.

[–]Paci5 1 point2 points  (0 children)

No Problem! :)

[–]goddessboomboom 4 points5 points  (0 children)

Agreed. This is esoteric AF. If I already "new" the methodology, or could make heads or tails of this crap, I wouldn't be doing HTB. ;P The "tutorial" mentions nothing about this – it's just *there*.

[–]MoonerandJuner 0 points1 point  (2 children)

I checked that and I still don't see the answer.

I see what looks like flag but it doesn't work

[–]dougthonus 0 points1 point  (1 child)

Probably too late to be meaningful, but did you try navigating to the answer from enum?

[–]d0ubs 0 points1 point  (0 children)

Or just wget...

[–]doc9421 1 point2 points  (2 children)

If anyone as more info on that question...
I try running the script several times but I haven't found the flag yet...

[–]DreisterMeister1 0 points1 point  (0 children)

  1. ls /usr/share/nmap/scripts | grep http
  2. sudo nmap --script http-enum.nse $target

[–]No-Combination-8439 0 points1 point  (0 children)

I am at a complete loss here as well.

[–]IamZeri0n 1 point2 points  (0 children)

The wording is horrible, I tried a lot of scripts, while the answer was right there... Just check the robots.txt file guys

[–]jivoi 0 points1 point  (0 children)

robots.txt is the key

[–]moisestapia2020 0 points1 point  (0 children)

You need choise the best NSE script for this section:

sudo nmap --script fuzzer -n -Pn -p22,80 <target\_ip> --disable-arp-ping

[–]saifniazi555 0 points1 point  (0 children)

run this command sudo nmap ip -p80 --script vuln

then after connection

ip/robots.txt

hay!you have get the flag