Presentation is loading. Please wait.

Presentation is loading. Please wait.

Nessus Vulnerability Scan

Published byCaroline Newton Modified over 6 years ago

Similar presentations

Presentation on theme: "Nessus Vulnerability Scan"— Presentation transcript:

1 Nessus Vulnerability Scan
Noah Berson

2 What are Nessus and Metasploitable?
Nessus Vulnerability Scanner Graphical results Database of exploits Recommendations for fixes Plugin Engine Metasploitable Purposefully vulnerable Linux OS A branch of Ubuntu Linux Practice target for common penetration testing techniques

3 Metasploitable Results
Basic Network Scan selected Targeted by IP address 10 minute scan time for basic scan 150 issues 42 ranging from critical to low

4 Example Results

5 The vsftpd Smiley Face backdoor
Detailed information of the vulnerability How its exploited Links to online resources Vulnerability discover date and patch date The Solution to Smiley Face “Validate and recompile a legitimate copy of the source code.”

6 Nessus Review Great for a wide range of devices in full version
Very informative with online database and extra resources Only to be used as a starting point; not by itself Conduct scans regularly

Download ppt "Nessus Vulnerability Scan"

Similar presentations

Approaches to meeting the PCI Vulnerability Management and Penetration Testing Requirements Clay Keller.

Approaches to meeting the PCI Vulnerability Management and Penetration Testing Requirements Clay Keller.
Part 2 Penetration Testing. Review 2-minute exercise: RECON ONLY Find 3x IP addresses at the U.S. Merchant Marine Academy Google: “U.S. Merchant Marine.

Part 2 Penetration Testing. Review 2-minute exercise: RECON ONLY Find 3x IP addresses at the U.S. Merchant Marine Academy Google: “U.S. Merchant Marine.
Presenter: Robbie Corley Organization: KCTCS

Presenter: Robbie Corley Organization: KCTCS
Penetration Testing & Countermeasures Paul Fong & Cai Yu CS691 5 May 2003.

Penetration Testing & Countermeasures Paul Fong & Cai Yu CS691 5 May 2003.
Offensive Security Part 1 Basics of Penetration Testing

Offensive Security Part 1 Basics of Penetration Testing
Vulnerability Analysis Borrowed from the CLICS group.

Vulnerability Analysis Borrowed from the CLICS group.
CSCI 530L Vulnerability Assessment. Process of identifying vulnerabilities that exist in a computer system Has many similarities to risk assessment Four.

CSCI 530L Vulnerability Assessment. Process of identifying vulnerabilities that exist in a computer system Has many similarities to risk assessment Four.
Computer Security and Penetration Testing

Computer Security and Penetration Testing
Browser Exploitation Framework (BeEF) Lab

Browser Exploitation Framework (BeEF) Lab
Greg Williams. IT Security Program  Objective is to maintain integrity of University systems  Minimum Security Standard 12/5/2010Greg Williams CS591.

Greg Williams. IT Security Program  Objective is to maintain integrity of University systems  Minimum Security Standard 12/5/2010Greg Williams CS591.
“Today over 70% of attacks against a company’s network come at the ‘Application Layer’ not the Network or System layer.” - Gartner Is Your Web Application.

“Today over 70% of attacks against a company’s network come at the ‘Application Layer’ not the Network or System layer.” - Gartner Is Your Web Application.
Vulnerability Types And How to Use Them.

Vulnerability Types And How to Use Them.
Penetration Testing Edmund Whitehead Rayce West. Introduction - Definition of Penetration Testing - Who needs Penetration Testing? - Penetration Testing.

Penetration Testing Edmund Whitehead Rayce West. Introduction - Definition of Penetration Testing - Who needs Penetration Testing? - Penetration Testing.
Vulnerabilities. flaws in systems that allow them to be exploited provide means for attackers to compromise hosts, servers and networks.

Vulnerabilities. flaws in systems that allow them to be exploited provide means for attackers to compromise hosts, servers and networks.
4/13/2010.  CSS Meeting  Stephen Crane on Programming Contests  1pm  Building 8 room 345 05/11/10.

4/13/2010.  CSS Meeting  Stephen Crane on Programming Contests  1pm  Building 8 room /11/10.
1 Panda Malware Radar Discovering hidden threats Channel Presentation Name Date.

1 Panda Malware Radar Discovering hidden threats Channel Presentation Name Date.
Attack Lifecycle Many attacks against information systems follow a standard lifecycle: –Stage 1: Info. gathering (reconnaissance) –Stage 2: Penetration.

Attack Lifecycle Many attacks against information systems follow a standard lifecycle: –Stage 1: Info. gathering (reconnaissance) –Stage 2: Penetration.
The Microsoft Baseline Security Analyzer A practical look….

The Microsoft Baseline Security Analyzer A practical look….
Software Security Testing Vinay Srinivasan cell: +91 9823104620.

Software Security Testing Vinay Srinivasan cell:
Computer and Network Security Issues –the Security Officer’s Perspective Jeff Savoy, Information Security Officer.

Computer and Network Security Issues –the Security Officer’s Perspective Jeff Savoy, Information Security Officer.

Similar presentations

Ads by Google