![\"\"](\"https:\/\/cyberlorenzo.tech\/wp-content\/uploads\/2022\/04\/Screenshot-17-1-1024x714.png\")
<\/figure>\n\n\n\n<\/p>\n\n\n\n
Next we are going to run a basic network scan on our host (uncredentialed). There are 5 threat levels Nessus uses : info, low, medium, high and critical. The VM in this project has one medium level threat. By clicking on it you can see more information about the vulnerability and how to remediate it if you wish to do so. <\/p>\n\n\n\n
Certain vulnerabilities will not be addressed as risk acceptance varies from organization to organization. <\/p>\n\n\n\n <\/p>\n\n\n\n Here we are about to install a old version of FireFox and see what Nessus uncovers for us. I also enabled a CREDENTIALED scan. This can be done by going to the configure tab and entering the username and password of the machine. This will allow Nessus access to the registry on the VM which will allow for a more thorough scan. <\/p>\n\n\n\n Wow! Look at all of those new vulnerabilities, let’s see where most of them are from. <\/p>\n\n\n\n <\/p>\n\n\n\n As expected, we have multiple critical vulnerabilities from the version of FireFox we installed on the VM. This can be easily remediated by updating FireFox and then scanning the machine again to ensure that there are not anymore vulnerabilities. <\/p>\n\n\n\n <\/p>\n","protected":false},"excerpt":{"rendered":" Nessus is one of the most prominent vulnerability scanners in the industry at this time. In this lab, I will be conducting a basic vulnerability scan against a VM with an old FireFox version installed on the machine. Nessus is fairly simple scanner to use so this will be a rather short demonstration. Let’s get […]<\/p>\n","protected":false},"author":1,"featured_media":222,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"saved_in_kubio":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[9],"tags":[],"class_list":["post-126","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-project-iii"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/posts\/126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=126"}],"version-history":[{"count":4,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/posts\/126\/revisions"}],"predecessor-version":[{"id":257,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/posts\/126\/revisions\/257"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=\/wp\/v2\/media\/222"}],"wp:attachment":[{"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cyberlorenzo.tech\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/cyberlorenzo.tech\/wp-content\/uploads\/2022\/04\/Screenshot-19-1024x337.png\")
<\/figure>\n<\/figure>\n\n\n\n![\"\"](\"https:\/\/cyberlorenzo.tech\/wp-content\/uploads\/2022\/04\/Screenshot-25-1-1024x241.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/cyberlorenzo.tech\/wp-content\/uploads\/2022\/04\/Screenshot-23-1024x586.png\")
<\/figure>\n\n\n\n