Forum Discussion

GusC's avatar
GusC
Icon for Bronze III rankBronze III
10 months ago
Solved

CVE-2024-5910 (Palo Alto Expedition) – Defensive

Hello - I'm a bit stuck on  CVE-2024-5910 (Palo Alto Expedition) – Defensive I cannot see an obvious answer to  After attempting to reset the admin credentials, which endpoint did the attacker att...
defensive cyber
  • BarnyStewart's avatar
    BarnyStewart
    9 months ago

    Hi GusC

    Each time the attacker attempts to reset the admin password (using the PHP file identified in task 2), they access the same endpoint immediately afterwards - which endpoint is it?

    Hope that helps!

TillyCorless's avatar
TillyCorless
Icon for Community Manager rankCommunity Manager
9 months ago

Hi GusC , I'll speak with the lab author and come back to you. 

 

Thanks!

veryk's avatar
veryk
Icon for Bronze II rankBronze II
2 months ago

I agree with GusC​ here, I was looking for an end point, hostname, URL, not what the answer was. Not until I read your hint did I even think about that could be the answer. Endpoint shouldn't be used and swapped out with what the answer is or at least added in to the question.