A vulnerability as a weakness in a network system some of the most common vulnerabilities that we face
in the cyber security world are software Barner abilities.
If you go to Cisco's Security advisories and alerts web page you can see a list of recent vulnerabilities.
For example let's look at this Microsoft vulnerability the summary documentation says that this vulnerability
in Microsoft ads could allow an unauthenticated remote attacker to access sensitive information on a
targeted system.
So obviously this would be a major concern and this is why it is critical to make sure that our network
devices have uptodate software to eliminate as many vulnerabilities as we can.
To find vulnerabilities on endpoints you can use vulnerability scanning software to demonstrate what
a vulnerability scan looks like.
I will use a tool included with Caylee called Golla shmear up.
I think that is how you say it anyway but I'm not positive so I log back into my Kelly virtual machine
is you're logging back into it for the first time and you don't remember the default password it's T
O R
if you go up to this applications drop down from your Kelly desktop it gives a list of the different
categories of applications that you can run.
So since I want to show you how to check for vulnerabilities I'm going to go in to this vulnerability
analysis option and then I'm going to run this top on here with the spider icon.
So I left click on that.
It's going to pull up a terminal and then it gives you some basic information for how to run this application
as well as what commands you could run.
There's Python scripts you can use to run this application
OK.
And I'm going to show you the stream that I use for using this application for scans.
Start out with sudo to run this string as a super user to make sure that there's no limitations for
any type of permissions that it's trying to use for the scanner.
And then to actually call out the application will type in Gaulish mirro and then I'm going to say the
command I want to run for the application is scan and then my target host this could be an IP address
or a hostname.
I use the path to my web server HTP and then the name of my web server and I could just enter now and
it would scan that target and you would see the output in the terminal all uses so many plug ins by
default that that could take a really long time and since this is for demonstration purposes I'm going
to disable some of the plug ins that it uses with the minus the option and then the name of the plug
in that saying disable any plug ins with DNS in the plug in name.
And then I'll disable anything with Brewton it because there is some brute force against and map
harvester
and finally I want to output the results to a HDMI file.
So I'll say minus 0 to output the result name of the file.
I want it to be called scan results.
H t.
OK so the scan completed you can see the results of each of the scans right in the terminal like for
example it did show it found a SSL vulnerability.
But what's really cool about this application is it'll actually give you a web page summary of the the
scan.
So I'm going to minimize this then I'm going to just search for the name of the file that I want to
output the results to.
Or go to other locations.
Click on computer and then I'll search for the name of the file I sent the results to.
Now I've found my HMO page.
I'm going to double click it and then it's going to open up this web page and in my browser.
So here's our nice little vulnerability report that the goal this mirro or whatever it's called application
created for us.
It shows my target host and then which vulnerabilities were discovered we have vulnerabilities by criticality
vulnerabilities by type.
So here it did find an invalid SSL certificate vulnerability
and then down at the bottom and gives you a detailed report.
So is the plug in that discovered the Boehner ability as well as a nice description of the vulnerability.