Now, after we have performed the scanning on a target, the next step is to pull the liability assessment.
Vulnerability assessment is a systematic review of security weaknesses in an information system.
It evaluates the system is susceptible to any known vulnerabilities.
Exercise different security levels to those vulnerabilities and recommends remediation or mitigation
if and whenever needed.
After the scan.
We need to find vulnerabilities for each port and vulnerability assessment can help us to exploit the
actual system.
There are multiple tools available for vulnerability assessment.
You're going to see to most use tools that supplied the simple command line utility in line X to search
to exploit DV database.
And Nessus is a remote security scanning tool which scans a computer, raises an alert if it discovers
any vulnerabilities that malicious hacker could use.
It is available for both Windows as well as Kali Systems, which is a paid tool, but it is the most
widely used scanner on the market.
Such logic comes preinstalled with nine x.
To use such supply as simply run the scan and check for vulnerabilities.
Use the command search deployed with the version number of the service running on system, and it will
list all available as part of the version.
Vanessa is a peer too.
However, the trial version allows scanning up to 16 apps.
When installing NASA's visit the official NASA's website.
Download and install it.
First to conduct a basic scan.
You are Target.
Let's start the scan.
Nessus will scan the target and provide a complete report.
No.
Let's see the actual demonstration.
So in the previous lecture, we have come to know that our target machine is using VTS ftp version 2.3.4.
Just use the command, search it and give it the version number of the service.
And you can see that it has provided us the list of all experts available.
Including one that is available for us.
Right?
You could also check all experts of the voice activity service.
And you can see that there are different experts available for different versions.
No.
Let's see the NEXUS scan once you've downloaded and sorted.
Click on your scan.
Invisibility scans lack basic network scan.
Give it a name and provide the target IP.
And save the skin.
Not large the can.
Nurses will scan the doctor for all available remedies.
I provide a detailed report that can be used by hackers as well as security professionals to harden
the target.
Go to the vulnerabilities tab and you can see that it has 13 critical vulnerabilities available.
Nurses also tell us if some exploit is available for that ability or not.
If you browse, though, also indicated some information that it can collect about the target.
I hope you like this lecture and see you in the next lecture.