Vulnerability Assessment Flow
Process for identifying and validating vulnerabilities
Vulnerability AssessmentTip: Click on any node to see related information!
Interactive Mind Map
graph TD
A[Asset Discovery] --> B[Service Enumeration]
B --> C[Automated Scanning]
C --> D[Manual Validation]
D --> E[False Positive Analysis]
E --> F[Risk Rating]
F --> G[Prioritization]
C --> H[Nessus/OpenVAS]
C --> I[Nmap Scripts]
D --> J[Proof of Concept]
Related Modules
Quick Reference
Nmap Vuln Scripts
nmap --script vuln 10.10.10.5 # Run all NSE vulnerability scripts
Searchsploit
searchsploit apache 2.4 # Search for exploits locally searchsploit -m 12345 # Mirror/copy exploit to current dir
Manual Checks
- Check service versions against CVE databases
- Test for default credentials
- Look for misconfigurations