Task 3
What flag to we use to specify the target URL?
-u
What command do we use for the subdomain enumeration mode?
dns
Task 4
Which flag do we have to add to our command to skip the TLS verification? Enter the long flag notation.
— no-tls-validation
Enumerate the directories of www.offensivetools.thm. Which directory catches your attention?
secret
Continue enumerating the directory found in question 2. You will find an interesting file there with a .js extension. What is the flag found in this file?
THM{ReconWasASuccess}
Task 5
Apart from the dns keyword and the -w flag, which shorthand flag is required for the command to work?
-d
Use the commands learned in this task, how many subdomains are configured for the offensivetools.thm domain?
4
Task 6
Use the commands learned in this task to answer the following question: How many vhosts on the offensivetools.thm domain reply with a status code 200?
4
