diff --git a/scenarios/ctf/agent001.xml b/scenarios/ctf/agent001.xml
index 19316364c..21d224df2 100644
--- a/scenarios/ctf/agent001.xml
+++ b/scenarios/ctf/agent001.xml
@@ -128,7 +128,8 @@ You will need to use a variety of tools and techniques to perform an attack: net
       </input>
     </utility>
 
-    <vulnerability module_path=".*(nostromo_code_exec|apache_druid_rce|linuxki_rce|gitlist_040|moinmoin_195|jboss_remoting_unified_invoker_rce)" privilege="user_rwx" access="remote" read_fact="strings_to_leak">
+    <!-- removed apache_druid_rce|linuxki_rce|gitlist_040|moinmoin_195 needs further testing -->
+    <vulnerability module_path=".*(nostromo_code_exec|jboss_remoting_unified_invoker_rce)" privilege="user_rwx" access="remote" read_fact="strings_to_leak">
       <!-- will have strings_to_leak -->
       <input into="strings_to_leak">
         <generator type="evil_file_generator"/>