2. Perform Vulnerability Assessment using Various Vulnerability Assessment Tools

A vulnerability assessment is an in-depth examination of the ability of a system or application, including current security procedures and controls, to withstand exploitation.

1. Vulnerability assessment using openVAS

Run the following command to load the openVAS docker.

docker run -d -p 443:443 –-name openvas mikesplain/openvas

In a browser , go to https://127.0.0.1/. OpenVAS login page appears, log in with admin/admin.

1. Navigate to Scans --> Tasks from the Menu bar.

   If a Welcome to the scan task management! pop-up appears, close it.

   
2. Hover over wand icon and click the Task Wizard option.

   
3. The Task Wizard window appears; enter the target IP address in the IP address or hostname field (here, the target system is Windows Server 2022 [10.10.1.22]) and click the Start Scan button.

   
4. The task appears under the Tasks section; OpenVAS starts scanning the target IP address.

5. Wait for the Status to change from Requested to Done. Once it is completed, click the Done button under the Status column to view the vulnerabilities found in the target system.

   It takes approximately 20 minutes for the scan to complete.

   If you are logged out of the session then login again using credentials admin/admin.

   
6. Report: Results appear, displaying the discovered vulnerabilities along with their severity and port numbers on which they are running.

   The results might differ when you perform this task.

   
7. Click on any vulnerability under the Vulnerability column to view its detailed information.

8. Detailed information regarding selected vulnerability appears, as shown in the screenshot.

   
9. Similarly, you can check other Reports by hovering over the Report: Results section to view other Reports regarding the vulnerabilities in the target system.

2. Vulnerability assessment using Nessus

Paid tool, industry standard.

Nessus Product FamilyTenable®

3. Vulnerability assessment using GFI LanGuard

Windows tool

GFI LanGuard

4. Nikto scanner

Nikto help

nikto -H

start the scan

nikto -h islamabadtrafficpolice.gov.pk -Tuning x

-h specifies the targer

-Tuning scan perimenters, x specifies run all scans against the target

Finding cgi directories

nikto -h certifiedhacker.com -Cgidirs all

saving the scan

nikto -h certifiedhacker.com -o result -F txt

-o filename where result will be saved

-F file type

Certified Ethical Hacker (CEHv12) Practical hands on LabsUdemy