This is yet another high level overview because I think we've covered this quite a bit in this course.
So using opponents with known vulnerabilities you're gonna see this when it comes to network pen testing
for example like Eternal Blue right.
Or any of the things that we cover in the midcourse Capstone.
A lot of those were just kind of run and gun really easy vulnerabilities.
You're gonna see this in web applications as well.
And there are different tools that we can utilize and go after searching for these known vulnerabilities.
And you kind of saw it originally when we were talking in burps we and let's go back into burps we hear
and there's some tools in here especially with the scanner tool right.
So the scanner tool is going to check for these out of date kind of applications.
If you go into extender and you have actually have the pro prohibition there's some more in here that
will allow you active scan plus plus will check for it.
Retired J.S. over here will also check for potential vulnerable javascript libraries.
And this software vulnerability scanner all also Java D serialization scanner we just talked about that
right.
So there's a bunch of different ones additional scanner check software version reporter.
These are all part of the BRB pro edition and that's OK.
Again if you don't have Bert probe but know that these exist over here in the extenders store and you
know if you're if you're kind of you know doing it on the cheap you can come no appetizer look at it
say oh it's running J.
Query three point three point one.
Let me go check out what that is.
Or if you go to a Web site and you're running a scan and you see like OK this is running this version
of this tool or this version of this back end you know you're going to want to research that and see
what if there's anything vulnerable for that web application.
Another thing that you can do and probably will do is run nexus against your web application.
You're gonna run it against it.
Not only to do vulnerability scanning against the web app you're going to use more brb sweet for that
but also to run it against the ports on that machine to see if there's any open ports that might be
there that have vulnerable our vulnerabilities.
But it will identify some of these software that's running on the Web site as well.
And it will tell you if it's vulnerable if it finds out that it has the plug in for it.
So just keep that in mind.
Really that's that's the high level overview.
This is something that should be familiar to all of us is that we should always be patching right.
We shouldn't we should not be using components with no motor abilities.
And if we can prevent it by all means necessary.
So when you see it mentions I retired at J.S. here it's got dependency check.
There's there's other things in these resources that we're providing that talks about it here it talks
about Apache struts to guess what Apache struts to us by the way that was a d civilization attack.
OK so this is a very very famous attack here and it just talks about it and you can go and it's talking
about a showdown here you can go and show Dan and if you urban on showdown it's a great Web site where
you can go out there and look up different vulnerabilities that might exist like you might be able to
search for this specifically by a string and see.
OK.
Well wow there's all these out there these machines up there that are still vulnerable to this Apache
struts 2 or 2 x y z type exploit.
You know and it's it's honestly a very scary thing when you do that because just the other day I was
looking at a bug bounty program and I said well there's this there's this vulnerability that just came
out and there's an easy way to search for it something to go search for it and see what's there and
if any of these machines belong to a bug bounty program.
So I did the research just looking through it and all these places where they were vulnerable was.
It was sad almost like hospitals schools government entities all these things that were out there that
were just wide open and vulnerable.
And it's because patching is not kept up to date if you're not patching if you don't have an active
patch schedule you're going to be using these these components with known vulnerabilities and you're
going to run into issues.
So you know patching is very very very important and it's going to show up on this list pretty much
all the time every time because it just doesn't get done enough.
And that's where we come in and we take advantage of it.
So that's really it.
We're gonna go ahead move on into insufficient logging in monitoring and then we are done with this
section.