Day 25 · Week 4

Vulnerability research and validation

Learn to move from version evidence to a defensible vulnerability hypothesis without treating scanner output as proof.

TryHackMe rooms

Corresponding practice

  • Choose one service found in a previous Nmap room and record product, version, configuration evidence, and confidence.
  • Research the vendor advisory, NVD entry, affected versions, prerequisites, impact, and fixed version.
  • Create a triage table with confirmed, likely, informational, and false-positive states.
  • Validate only against the related TryHackMe target; do not test public systems.

Evidence to capture

  • Vulnerability research worksheet with source links
  • Scanner finding versus manual validation comparison
  • One paragraph explaining confidence and remaining uncertainty

What I learned

Explain why a matching version string alone is not enough to confirm a vulnerability.

Problems and dead ends

Record missing evidence, prerequisites, or version ambiguity.

What I will revisit

Pick one false positive and explain how to avoid reporting it.