Cybersecurity — Vulnerability Assessment
Tools
- Nessus: Vulnerability scanner
- OpenVAS: Open source scanner
- Qualys: Cloud-based
- Nikto: Web server scanner
Nmap scripting
# Vulnerability scripts
nmap --script vuln target_ip
# Specific scripts
nmap --script http-vuln-cve2017-5638 target_ip
OpenVAS
# Start
openvasmd
# Create target
omp -u admin -w admin --create-target target_name -h target_ip
# Create task
omp -u admin -w admin --create-task task_name --target target_uuid --config Full
# Run scan
omp -u admin -w admin --start-task task_uuid
CVSS scoring
| Score | Severity |
|---|---|
| 0.0 | None |
| 0.1-3.9 | Low |
| 4.0-6.9 | Medium |
| 7.0-8.9 | High |
| 9.0-10.0 | Critical |
Reporting
- Executive summary
- Technical details
- Remediation steps
- Risk rating
Best practices
- Regular scans
- Patch management
- Risk-based prioritization
- Document findings
Mini Practice
- Run vulnerability scan
- Analyze results
- Prioritize findings
- Create report
Up Next
Continue with Incident Response - Handling breaches.
Related Topics
Frequently Asked Questions about Vulnerability Assessment
What is Vulnerability Assessment in Cybersecurity?
Vulnerability Assessment is a fundamental concept in Cybersecurity. This lesson explains it step by step with clear examples, making it easy for beginners to understand.
How do I learn Vulnerability Assessment?
Start by reading the explanation above, then try the code examples. Practice by modifying the examples and experimenting with different values. Hands-on practice is the best way to learn Vulnerability Assessment.
Why is Vulnerability Assessment important in Cybersecurity?
Vulnerability Assessment is essential for Cybersecurity development. Understanding this concept will help you write better code and solve real-world problems more effectively.