Prémisse
In this video walkthrough, I demonstrated the use of Openvas to scan for web application vulnerabilities. I explained the target, port, and credentials configurations in addition to breaking down the structure of the report.
Obtenir les notes du certificat OSCP
Description
OpenVAS, an application used to scan endpoints and web applications to identify and detect vulnerabilities. It is commonly used by corporations as part of their mitigation solutions to quickly identify any gaps in their production or even development servers or applications. This is not an end all be all solution but can help to get rid of any common vulnerabilities that may have slipped through the cracks.
From the OpenVAS GitHub repository “This is the Open Vulnerability Assessment Scanner (OpenVAS) of the Greenbone Vulnerability Management (GVM) Solution. It is used for the Greenbone Security Manager appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Network Vulnerability Tests (NVTs).”
Questions de défi
- Quand l’analyse a-t-elle commencé dans le cas 001 ?
- Quand l’analyse s’est-elle terminée dans le cas 001 ?
- Combien de ports sont ouverts dans le cas 001 ?
- Combien de vulnérabilités au total ont été trouvées dans le cas 001 ?
- Quelle est la vulnérabilité la plus grave trouvée ? (MSxx-xxx)
- What is the first affected OS to this vulnerability?
- Quelle est la méthode de détection des vulnérabilités recommandée ?
Procédure pas à pas
