The goal of passive and active reconnaissance is to identify an exploitable target.
And the goal of vulnerability assessment is to find the security flaws that are most likely to support
the testers or attackers objective.
For example, when authorized access, denial of services or modification of data, the vulnerabilities
assessment during the exploit phase of the kill chain focuses on creating the access to achieve the
objective mapping of the vulnerabilities, to line up the exploits and maintain persistent access to
the target.
Thousands of exploitable vulnerabilities have been identified, and most are associated with at least
one proof of concept code, file or technique to allow the system to be compromised.
Nevertheless, the underlying principle that governs success are the same across networks, operating
systems and applications.
In this course, you will learn using online and local vulnerability resources.
You will also learn writing your own Nmap script using the Nmap scripting engine, web and application
specific scanners.
You will also learn threat modeling in general.
You will learn how to select and customize multiple vulnerability scanners.