Hi,
I am not able to solve the third question of the final assessment. The hint says something about using “PORT instead of the above port”. But I have to specify a port. I run a recursion scan with depth 2. I use the directory-list-2.3-small.txt
This is the ffuf command:
ffuf -w /usr/share/seclists/Discovery/Web-Content/directory-list-2.3-small.txt:FUZZ -u http://faculty.94.237.59.180:31740/FUZZ -r -recursion-depth 2 -e .php,.phps.php7 -v
The answer you provide needs to be with the port removed and saying PORT instead for it to be accepted, that’s what the hint refers to.
You shouldn’t need to change the recursion depth, just make sure you try each subdomain and use -fs if needed