Scribd
Upload
4 views2 pages

Module 5 Vulnerability Analysis Note

Module 5 covers vulnerability assessment and penetration testing (VAPT) tools and resources, including CWE, CVE, NVD, and the Exploit Database. It details the use of OpenVas-GVM for vulnerability analysis in Linux and Nessus for Windows, providing step-by-step instructions for installation and scanning. The document emphasizes the importance of defining scan policies and targets for effective vulnerability analysis.

Uploaded by

praveenmagar77
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
4 views2 pages

Module 5 Vulnerability Analysis Note

Module 5 covers vulnerability assessment and penetration testing (VAPT) tools and resources, including CWE, CVE, NVD, and the Exploit Database. It details the use of OpenVas-GVM for vulnerability analysis in Linux and Nessus for Windows, providing step-by-step instructions for installation and scanning. The document emphasizes the importance of defining scan policies and targets for effective vulnerability analysis.

Uploaded by

praveenmagar77
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Module 5 : vulnerability

 VAPT : Vulnerability Assesment & Penetration Testing .

 CWE (Common weakness Enumeration site):


Link: [ [Link] ]

 CVE (Common Vulnerability and Exprosures):


Link: [ [Link] ]

 NVD ( National Vulnerability Database):


Link: [ [Link] ]

 Exploit Database by Rapid 7 (IMPORTANT)


Link: [ [Link] ]

 Vulnerability Analysis in Linux: (Important)


 OpenVas-GVM tool
- to detect security problems in remote systems.

- Using gvm tool <step by step>:


 To install: Sudo apt Install openvas
 To Update gvm database: sudo gvm-feed-update
 To Start tool: sudo gvm-start
 To open GUI Interface, browse: [Link]
 Login Credientials: username - admin, password – admin

 For Immediate Scan: (Important)


Select Scan tab > goto left panel and select star> select task
wizard > set target ip > scan
 For manual Scan: (Important)
1. Define target:
Steps: Configuration tab> targets >on left side
corner- click on new target> input name> input
comment> input Host/target Ip > Port list(default) >
Alive test (default)> Save

2. Define Scan:
Steps: scan tab > task> new task > input name> input
comment> scan target> select target > scan

 Vulnerability Analysis in Windows: (Important)


 Nessus Tool:
- Install Nessustool & browse: [Link]
- Username: admin , Password: Pa$$w0rd

1. Define Scan Policy first:


I. Click on policies (left Side panel) > Create new policy > select Advance Scan
> input Policy name> input Description > select

II. Click on Discovery > port scanning > check all port enumeration.

III. Click on Advance> assign value to max number of concurrent tcp session
per host and per scan too (value: Maximum , for both per host and per
scan)

IV. Click on Credientials> select category> host> windows> add username and
password

V. Goto plugins> save

VI. For Scan: create a new scan > user-defined > Assign target > Start scan

You might also like