Vulnerability

Perform vulnerability scanning and exploit research.

Vulnerability Scanner

Nessus

Info

Vulnerability scanner very powerful.

Runs on port 8834 tcp.

Nessus has two parts (both can be on the same machine):

• Client to configure the scan.

• Server to perform the scan and send the results to the client.

Setup

Other

OpenVAS

Info

Vulnerability scanner open-source and free.

Runs on port 8080 tcp.

Like nessus, OpenVAS also has two parts (both can be on the same machine):

• Client to configure the scan.

• Server to perform the scan and send the results to the client.

Setup

Tools & Other

Tools

Tool	Details
nmap	/usr/share/nmap/scripts/ nmap --script-updatedb nmap --script--help <SCRIPT> nmap --script "<SCRIPT or TYPE[safe,vuln,external]>" <IP>
nikto	Server Web Scanner. Edit /var/lib/nikto/nikto.conf.default nikto -h <URL> -o <OUTPUT.html> -Format html
wpscan	WordPress Security Scanner. wpscan --url <URL> --random-user-agent -o <OUTPUT> -e p --plugins-detection aggressive --api-token <API_KEY>

Still to be seen

Research Exploit

Very important to analyze the exploits found very carefully, they could be harmful!

Tools

Tools	Detail
searchsploit	Exploit-db database locally and offline. sudo apt install exploitdb searchsploit -u (update) searchsploit <STRING> (get ID) searchsploit -w <STRING> (get LINK) searchsploit -x <ID> (see l'exploit) searchsploit -m <ID> (Copy exploit + info)

Website