Vulnerability Assessment Flow

Process for identifying and validating vulnerabilities

Vulnerability Assessment

Tip: Click on any node to see related information!

MAP Interactive Mind Map

graph TD A[Asset Discovery] --> B[Service Enumeration] B --> C[Automated Scanning] C --> D[Manual Validation] D --> E[False Positive Analysis] E --> F[Risk Rating] F --> G[Prioritization] C --> H[Nessus/OpenVAS] C --> I[Nmap Scripts] D --> J[Proof of Concept]

REF Quick Reference

Nmap Vuln Scripts

nmap --script vuln 10.10.10.5 # Run all NSE vulnerability scripts

Searchsploit

searchsploit apache 2.4 # Search for exploits locally
searchsploit -m 12345 # Mirror/copy exploit to current dir

Manual Checks

  • Check service versions against CVE databases
  • Test for default credentials
  • Look for misconfigurations
Back to Mind Maps View Full Module