Back to Scanning Techniques

Vulnerability Scanning

Discover the world of vulnerability scanning: Learn techniques, tools, and see it in action.

What is Vulnerability Scanning?

Vulnerability scanning is the process of identifying security weaknesses and flaws in systems and software within a network. It's a crucial component of vulnerability management, helping organizations to proactively find and fix vulnerabilities before they can be exploited by malicious actors.

Types of Vulnerability Scans

Network-based Scans

Identifies vulnerabilities in network infrastructure, including open ports, misconfigured services, and outdated software.

Host-based Scans

Focuses on identifying vulnerabilities within individual systems, including misconfigurations, missing patches, and insecure settings.

Application Scans

Targets web applications to find security flaws like SQL injection, cross-site scripting (XSS), and other application-specific vulnerabilities.

Database Scans

Specifically looks for vulnerabilities in database systems, including misconfigurations, weak passwords, and access control issues.

Vulnerability Scanning Tools and Commands

Nessus

A comprehensive vulnerability scanner that can identify vulnerabilities, configuration issues, and malware across a wide range of systems and devices.

nessus scan new --name 'My Scan' --targets 192.168.1.0/24

Creates a new Nessus scan named 'My Scan' targeting the 192.168.1.0/24 subnet.

nessus scan launch 12345

Launches the Nessus scan with ID 12345.

nessus scan export 12345 --format pdf

Exports the results of scan 12345 in PDF format.