How can I discover server vulnerabilities without using a scanning software such as openVas? is there any manual ways or steps to follow to assure server security.
Thanks in advance
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
So what does OpenVAS actually do? It fingerprints your server, does discovery scans, mappings etc. and then compares your system with an exploit database, identifying all vulnerabilities that are most likely affecting your system.
All these steps can be done by a human in a manual way. You can, for example
Depending on your server setting, this is an immense task and extremely tedious and time consuming - that's why automated scanners were implemented in the first place.
Also depending on your server setting (e.g. you own the server, have full admin access to it and to programs' source code), you can do manual audits, code reviews etc. to verify manually if there are any potential vulnerabilities or policy violations present. It all depends on how much time and pain you are willing to put into it.