Challenge: Update B4 It's 2Late
National Cybersecurity Awareness Month has four themes; the last being 'Update Your Software.' This challenge will have you analyze a log and identify a web application attack. The goal is to piece together the narrative from the suspicious requests and understand how attacks like these can happen when you do not update your software.
Already have an account? Sign In »

Module 1: Investigate
Update to mitigate!
In this NCAM weekly challenge, you will analyze a web server log reviewing an exploitation attempt. This challenge aims to look beyond the basics of simply updating software by focusing on how stealthy an exploit can be and how it can slip through the cracks when software is not updated. It is common knowledge to patch your systems, products, and devices, but let’s see why it is essential to adhere to them!
- What is the name of the web application in the logs?
- What is the name of the vulnerable page?
- What is the CVE associated with this vulnerability?
- Is this attack authenticated or unauthenticated?
Who is this for:
Early career to mid practitioners. This challenge may be difficult for individuals new to cybersecurity, but the difficulty rating on this challenge is relatively low. We encourage using any internet resources and community/colleague assistance in completing the challenge.
Are write-ups permitted?
Yes, write-ups are permitted; please do not post answers directly. All write-ups should include a link to Cybrary and the Cybrary Course.
What resources are available to help solve this challenge?:
Online search, community, colleagues, or fellow practitioners.

Matthew Mullins
Technical Manager, Red Team


Complete this entire course to earn a Challenge: Update B4 It's 2Late Certificate of Completion