I am unable to complete the final step of the Task 8 interactive exercise to obtain the flag. The Attack Chain Mapper on the right side of the screen is stuck on Step 3 — the 'Drop tactic here' field for Step 3 (Attacker authenticates to Stratford VPN with stolen credentials) is not accepting any input. Steps 1 and 2 are marked as complete, and Steps 4 and 5 already show their correct tactics (Lateral Movement and Exfiltration), but the drag-and-drop interaction for Step 3 is non-functional. The available tactic options at the bottom (Reconnaissance, Persistence, Privilege Escalation, Defense Evasion, Discovery, Impact) do not include the correct answer for that step, which should be Initial Access or Lateral Movement depending on interpretation. Because Step 3 cannot be completed, the exercise never reaches Step 5, and the flag is never revealed. The left side shows the two preceding questions were answered correctly (SQL injection and Initial Access, both marked as Correct Answer), but the flag field remains empty with no way to progress.
#Threat Modeling for Pentesters with bug
somber wadi