Broadscope

Broadscope Logistics is a freight company whose web estate grew faster than its asset register. Recon IS this machine: there is nothing to inject and no shell to get. Your job is to work out how big the estate actually is, and then to notice the one host that stopped appearing on anybody's list. MECHANIC: every virtual host answers on this one address and port. Select one with the Host header (curl -H 'Host: www.broadscope.test' http://TARGET:30831/) or add the names to your /etc/hosts. Start at the default host and let the application tell you what else exists.