Analyze vulnerabilities with automated vulnerability scanner
Course:- PL-SQL Programming
Reference No.:- EM132321115

Assignment Help
Expertsmind Rated 4.9 / 5 based on 47215 reviews.
Review Site
Assignment Help >> PL-SQL Programming

Assignment - Vulnerability Discovery and Analysis

Reading and viewing prior to beginning the assignment:

  • Denial of Service
  • APT
  • Attack Timing

Lab Objectives - This activity will address module outcome 1. Upon completion of this activity, you will be able to: Identify and analyze vulnerabilities with automated vulnerability scanner.

In this lab, you will identify a malicious process and then extract the malicious code from the provided system memory using the Volatility Framework that is used by cyber-security professionals globally.

This week we will work with vulnerability identification and analysis. We will leverage an automated vulnerability scanner tool, OpenVas, to scan our target on all TCP ports to identify weakness and cross-reference the results for open ports, running services, and low hanging vulnerabilities we identified in previous lab activity using Nmap. We will sort and export the results and update our table that we started with the Nmap result. The table will be used as a guide to track and help us methodically validate each discovered port, service, and vulnerability for opportunities to take advantage of them and gain system access in the following week, which is focused on exploitation.

Lab Instructions -

Review the provided video for this module and any related reference (OpenVas manual)

Download, install, setup OpenVas vulnerability scanner

Perform a vulnerability scan of the provided Metasploitable target with the specified parameters

Configure the "Scan Task" with your name: Example: Vel Pavlov

Save the scan results in appropriate format to help you update the table with Nmap results. Save the report with your name. Example format VelPavlov.CSV

Update the table with results with the newly discovered vulnerabilities from OpenVas. You will be adding on to the table with results from the Nmap activity. You need to add columns for:

  • Vulnerability - brief description
  • CVE Reference - Example, CVE-2017-2932
  • CVSSv2 or 3 provided by the OpenVas - Example, 7.5
  • Fix/Recommendation - usually provided by the Vulnerability Scanner. Example, patch to the latest version. The recommendation will be specific to the vulnerability.

Next week, exploitation, you will add the following columns to the table with results

  • Exploit - what is the exploit you used to gain access to the system or escalate privileges
  • Exploit Success - was the exploit successful or not

Example table with contents.

Lab Deliverables -

  • Make sure each full-screen screenshot is accompanied by a brief explanation of the results, file, etc.
  • If you upload only screenshots without explanation, you will receive "0" points for the assignment.
  • Do not upload just screenshots or you will receive "0" points for the assignment.
  • If you do not upload full-screen screenshots, you will receive "0" points for the assignment.
  • Full-screen screenshot showing the configuration for the OpenVas scan with your name (all TCP ports, full and fast scan, against the Metasploitable VM).
  • Full-screen screenshot showing the completed scan with your name.
  • Full-screen screenshot showing the saved report with results with your name.
  • Updated Nmap table with results with the vulnerability information as specified in the "Instructions" section of this lab.

Compose your work in a .doc or .docx file type using a word processor (such as Microsoft Word, etc.) and save it frequently to your computer.

Attachment:- Assignment File.rar


Verified Expert

In this assignment we have perform analysis of metasploit. I have download the VMware for linux metasploit. Here ,I have done analysis of vulnerability and also install openvas and configure openvas .And finally done analysis and find the vulnerability.

Put your comment
View Conversion
  1. user image

    this is terrific!!!! thanks so much:) Very good efforts by the team and experts, dealing part from the team was very good and the prices are very cheap that any student can afford it.

  2. user image

    HINT: You can use Excel’s compare feature to compare two Excel files to show matches and differences. The OpenVas CSV or perhaps even XML file will need to be imported into Excel and saved as at least XLS*. You may also be able to use the “Discover Script” parser for OpenVas to normalize the table with results. NOTE: I do not expect you to complete the “Exploit” and “Exploit Success” columns. This is a preview for next week so you have an idea of what the finished table will look like.

  3. user image

    Compose your work in a .doc or .docx file type using a word processor (such as Microsoft Word, etc.) and save it frequently to your computer. For those assignments that are not written essays and require uploading images or PowerPoint slides, please follow uploading guidelines provided by your instructor. Check your work and correct any spelling or grammatical errors. When you are ready to submit your work, click "Upload Submission." Enter the submission title and then click on "Select a file to upload." Browse your computer, and select your file. Click "Open" and verify the correct file name has appeared next to Submission File. Click on "Continue." Confirm submission is correct and then click on "Accept Submission & Save."

Ask Question & Get Answers from Experts
Browse some more (PL-SQL Programming) Materials
Submit the SQL statement used to accomplish this task. What all types of JOIN have in common is that they, based on a condition, match one record from one table to one or mor
Create a stored function called get_customer_balance which will return a customer's balance from the membership table by passing in a membership number and write a single SE
Research Report around 800 words strengths and weaknesses of three DBMS software packages for utilization as a company-wide customer information database. Please compare Mic
Write the statement which creates table named Part, with Id field as an int idendity PK, a SupplierId int field, a Description string field of size 25, a Count int field, a
What is Structured Query Language (SQL)? First lets define SQL. Knowing the background is a good way to start. Then move on to understanding if we need SQL in Access. Let's
Create a query with all fields from the student table, where the student's last name is "Smith". Create a query that includes students' first names, last names, and phone numb
List the average cost of projects for employees who weakness is "no super power" and the average cost of projects for all other employees, create a new column that labels ea
Load heritage data release 3 (preprocessed to binary representation, including demographics and output attribute(s)) - Perform exploratory analysis - Create at least three cla