Analyze vulnerabilities with automated vulnerability scanner

Assignment Help PL-SQL Programming
Reference no: EM132321115

Assignment - Vulnerability Discovery and Analysis

Reading and viewing prior to beginning the assignment:

  • Denial of Service
  • APT
  • Attack Timing

Lab Objectives - This activity will address module outcome 1. Upon completion of this activity, you will be able to: Identify and analyze vulnerabilities with automated vulnerability scanner.

In this lab, you will identify a malicious process and then extract the malicious code from the provided system memory using the Volatility Framework that is used by cyber-security professionals globally.

This week we will work with vulnerability identification and analysis. We will leverage an automated vulnerability scanner tool, OpenVas, to scan our target on all TCP ports to identify weakness and cross-reference the results for open ports, running services, and low hanging vulnerabilities we identified in previous lab activity using Nmap. We will sort and export the results and update our table that we started with the Nmap result. The table will be used as a guide to track and help us methodically validate each discovered port, service, and vulnerability for opportunities to take advantage of them and gain system access in the following week, which is focused on exploitation.

Lab Instructions -

Review the provided video for this module and any related reference (OpenVas manual)

Download, install, setup OpenVas vulnerability scanner

Perform a vulnerability scan of the provided Metasploitable target with the specified parameters

Configure the "Scan Task" with your name: Example: Vel Pavlov

Save the scan results in appropriate format to help you update the table with Nmap results. Save the report with your name. Example format VelPavlov.CSV

Update the table with results with the newly discovered vulnerabilities from OpenVas. You will be adding on to the table with results from the Nmap activity. You need to add columns for:

  • Vulnerability - brief description
  • CVE Reference - Example, CVE-2017-2932
  • CVSSv2 or 3 provided by the OpenVas - Example, 7.5
  • Fix/Recommendation - usually provided by the Vulnerability Scanner. Example, patch to the latest version. The recommendation will be specific to the vulnerability.

Next week, exploitation, you will add the following columns to the table with results

  • Exploit - what is the exploit you used to gain access to the system or escalate privileges
  • Exploit Success - was the exploit successful or not

Example table with contents.

Lab Deliverables -

  • Make sure each full-screen screenshot is accompanied by a brief explanation of the results, file, etc.
  • If you upload only screenshots without explanation, you will receive "0" points for the assignment.
  • Do not upload just screenshots or you will receive "0" points for the assignment.
  • If you do not upload full-screen screenshots, you will receive "0" points for the assignment.
  • Full-screen screenshot showing the configuration for the OpenVas scan with your name (all TCP ports, full and fast scan, against the Metasploitable VM).
  • Full-screen screenshot showing the completed scan with your name.
  • Full-screen screenshot showing the saved report with results with your name.
  • Updated Nmap table with results with the vulnerability information as specified in the "Instructions" section of this lab.

Compose your work in a .doc or .docx file type using a word processor (such as Microsoft Word, etc.) and save it frequently to your computer.

Attachment:- Assignment File.rar

Verified Expert

In this assignment we have perform analysis of metasploit. I have download the VMware for linux metasploit. Here ,I have done analysis of vulnerability and also install openvas and configure openvas .And finally done analysis and find the vulnerability.

Reference no: EM132321115

Identification of major implementation flaws

ICT320 - Database Programming Identification of major implementation flaws and/or areas for improvement, including and identification of & proposal to remove repeated data.

Additional attributes department and datehired

Now, write a class called Employee that inherits from the Person class.  This class should have the additional attributes Department and DateHired.  Be sure to include Acces

Can we offer an example of a query

Can we offer an example of a Query in which we can use a parentheses to affect the order of execution in which the WHERE Clause has both AND and OR Logical Operators?

Create tables using sql ddl

Write the SQL DDL to create the database that contains each of the relations shown in the above ERD. You will need to provide - Your DDL code for each table that you create an

Write sql queries

Write a query to display the last name, department number, and salary of any employee whose department number and salary both match the department number and salary of any emp

Write a pl/sql solution that displays the registration

Write a PL/SQL solution that displays the registration and the maximum and the minimum miles travelled by a car during the rental period for all the bookings where the booki

Write a iterative function that returns the summation

Write and test functions that return summation of all the numbers (items) in the list. Write a recursive function that returns the summation of all the numbers in the list.

Create a script file containing the pl/sql code

For the lab, you will need to create a script file containing the PL/SQL code that will address the lab steps below. Run the script file in your SQL*Plus session using the S

Reviews

inf2321115

7/23/2019 4:35:53 AM

this is terrific!!!! thanks so much:) Very good efforts by the team and experts, dealing part from the team was very good and the prices are very cheap that any student can afford it.

len2321115

6/12/2019 11:16:06 PM

HINT: You can use Excel’s compare feature to compare two Excel files to show matches and differences. The OpenVas CSV or perhaps even XML file will need to be imported into Excel and saved as at least XLS*. You may also be able to use the “Discover Script” parser for OpenVas to normalize the table with results. NOTE: I do not expect you to complete the “Exploit” and “Exploit Success” columns. This is a preview for next week so you have an idea of what the finished table will look like.

len2321115

6/12/2019 11:16:01 PM

Compose your work in a .doc or .docx file type using a word processor (such as Microsoft Word, etc.) and save it frequently to your computer. For those assignments that are not written essays and require uploading images or PowerPoint slides, please follow uploading guidelines provided by your instructor. Check your work and correct any spelling or grammatical errors. When you are ready to submit your work, click "Upload Submission." Enter the submission title and then click on "Select a file to upload." Browse your computer, and select your file. Click "Open" and verify the correct file name has appeared next to Submission File. Click on "Continue." Confirm submission is correct and then click on "Accept Submission & Save."

Write a Review

 
Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd