Security Solutions: Vulnerability Scanner Overview

Search for a command to run...

No comments yet. Be the first to comment.
Link to the challenge on TryHackMe: Modern Web Stacks Introduction During a time-boxed engagement, the first tester to identify Apache/2.4.49 in a Server: header already knows the exact CVE before the

Link to the challenge/walkthrough on TryHackMe: Broken Authentication Introduction Authentication is the process by which a web application verifies the identity of the user making a request. It typic

Link to the HealthGPT AI security CTF challenge on TryHackMe. Meet HealthGPT, a well-meaning virtual assistant used by a busy healthcare team. It helps clinicians look up procedures, draft notes, and

Link to the section of the AI Odyssey CTF on TryHackMe: Token City. It covers challenges like: ML Sec: The Loan Arranger | AI Sec + DFIR: Rogue Commit | AI Sec + Web App Sec: Sealed Substation | Agent

Link to the Privilege Escalation Challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction By now, you should have an understanding of basic privilege escalation techniques and how t

In this article, I will write a write-up for Vulnerability Scanner Overview that covers What Are Vulnerabilities, Vulnerability Scanning, Tools for Vulnerability Scanning, CVE & CVSS, and OpenVAS.
What is the process of fixing the vulnerabilities called? Patching
Which type of vulnerability scans require the credentials of the target host? Authenticated
Which type of vulnerability scan focuses on identifying the vulnerabilities that can be exploited from outside the network? External
Is Nessus currently an open-source vulnerability scanner? (Yea/Nay) Nay
Which company developed the Nexpose vulnerability scanner? Rapid7
What is the name of the open-source vulnerability scanner developed by Greenbone Security? OpenVAS
CVE stands for? Common Vulnerabilities and Exposures
Which organization developed CVE? MITRE Corporation
What would be the severity level of the vulnerability with a score of 5.3? Medium
What is the IP address of the machine scanned in this task? 10.10.154.44
How many vulnerabilities were discovered on this host? 13
As the docker is started, you can now access OpenVAS by typing the following URL inside the browser:
https://127.0.0.1/login/login.html
The default login credentials of the tool are mentioned below:
Username: admin
Password: admin
Note: Please be aware that the scanning process can be slow.
What is the score of the single high-severity vulnerability found in the scan? 10
What is the solution suggested by OpenVAS for this vulnerability? Change the password of the mentioned account(s).
Thank you for reading my article. Please leave any questions or comments on improving my learning journey and the Lab THM challenges.