Vuln Assessment

security assessments

• security assessments
• vulnerability assessment
• assessment standards

vulnerability scoring and reporting

• common vulnerability scoring system (CVSS)
• common vulnerability and exposures (CVE)

nessus

• vulnerability scanning overview
• getting started with nessus
• nessus scan
• advaced settings
• working with nessus scan output
• scanning issues
• nessus skills assessment
  • download from https://www.tenable.com/downloads/nessus?loginAttempted=true
  • install using dpkg -i Nessus-8.15.1-ubuntu910_amd64.deb
  • start the service sudo systemctl start nessusd.service
  • find the webpage from https://localhost:8834

openvas

• getting started with openvas
• openvas scan
• exporting the results
• openvas skills assessment
  • install sudo apt-get install gvm && openvas
  • setup the thing gvm-setup,gvm-start

reporting

• reporting
  • executive summary
  • overview of assessment
  • scope
  • vulnerability and recommendations