(6) Tools Of Vulnerability Assessments

Question 1

What are the two most important scanning tools to know?

Answer 1

Nessus and OpenVas

Question 2

What is scout suite?

Answer 2

Scout suite is a multicloud auditing tool that goes into user accounts with cloud service providers

It seeks to get configuration info using those services APIs.

Supports AWS, Microsoft Azure, Google Compute Platform, Alibaba cloud, and Oracle Cloud Infrastructure

Scout Suite looks at service configuration for potential security issues.

Detailed reports are done and can be drilled down to more detailed data

Question 3

What is Pacu?

Answer 3

Pacu is a cloud focused framework for exploitation.

It works with AWS accounts and is made to help attackers determine what they can do with the access they have to an AWS Account.

Question 4

What is Prowler?

Answer 4

Prowler is a security configuration tester. It only works with AWS, Microsoft Azure and Google Compute Platform

Question 5

What is a web application scanner?

Answer 5

A web application scanner is a specialized tool used to examine the security of web apps

They test for specific things, like SQL injections, cross-site scripting, and cross site request forgery issues.

Question 6

How do web application scanners work?

Answer 6

Web application scanners work by combining traditional network scans of web servers with in depth probing of web apps using things like malicious input sequences and fuzzing in attempts to break the application.

Question 7

What is nikto?

Answer 7

Nikto is an open source tool that uses a command line interface. It is for web application scanning.

Question 8

What is Arachni?

Answer 8

It is a web application scanner for Windows, macOS, and Linux

Question 9

What is an interception proxy?

Answer 9

An interception proxy is a web application tester/exploit tool.

They intercept requests being sent from the browser to the web server before they get to the network.

It allows the tester to manipulate the request to attempt the injection of an attack

Question 10

What is Zed Attack Proxy?

Answer 10

Zed Attack Proxy (ZAP) is a community development project coordinated by the Open Web Application Security Project (OWASP)

ZAP intercepts requests sent from any web browser and alter them before going to the web server

Question 11

What is the Burp Proxy?

Answer 11

The Burp Proxy is an interception proxy (part of a web application security toolkit called Port Swigger).