# Exam Structure

<figure><img src="https://70441950-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FMTgI6XQOdvURWED9m7uG%2Fuploads%2FD6iUGEiGFe0UqbXeTyQA%2Fimage.png?alt=media&#x26;token=af2e4d80-a961-4703-8e76-53ce2c3c1300" alt=""><figcaption></figcaption></figure>

**The&#x20;**<mark style="color:red;">**examn covers 5 vulnerable webs**</mark>**,** whe it is necessary to **capture the side administrator and obtain a RCE.**

**1 web service** == **2 flags** with different scores.

<mark style="background-color:yellow;">To pass the examn, you need to get 80/100 points</mark> and **write a commercial pentesting report**, on each of them web services you need to show the site administrator and who you get an RCE

Otherwise, you report will be returned to you for revision and you will have to wait another 20 business days :S&#x20;

The report must indicate the vulnerability, describe in detail your steps (writeup), as well as the CVSS assessment.
