TryHackMe rooms
- Understanding Vulnerability Databases
- Vulnerability Scanning Tools
- Basic Vulnerability Identification Techniques
- Stretch: Tomcat: CVE-2024-50379
Corresponding practice
- Choose one service found in a previous Nmap room and record product, version, configuration evidence, and confidence.
- Research the vendor advisory, NVD entry, affected versions, prerequisites, impact, and fixed version.
- Create a triage table with confirmed, likely, informational, and false-positive states.
- Validate only against the related TryHackMe target; do not test public systems.
Evidence to capture
- Vulnerability research worksheet with source links
- Scanner finding versus manual validation comparison
- One paragraph explaining confidence and remaining uncertainty
What I learned
Explain why a matching version string alone is not enough to confirm a vulnerability.
Problems and dead ends
Record missing evidence, prerequisites, or version ambiguity.
What I will revisit
Pick one false positive and explain how to avoid reporting it.