Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [vulnerability-scanners]

A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.

1
vote
1answer
42 views

Can you scan unmanaged switches with vulnerability scanners?

The target switches do not have IP addresses and most scanners require IPs as targets. Can you scan unmanaged switches with vulnerability scanners? What scanners can target layer 2?
1
vote
0answers
31 views

Getting scanned on AWS Elastic BeanStalk

As soon as I upload/deploy an application to AWS Elastic BeanStalk, it gets scanned for common admin pages even though it’s not linked to by any external website and I have not shared the DNS name ...
-1
votes
0answers
15 views

faraday ide doesn't import the openvas scan [closed]

I'm trying to add an xml result file from openvas in faraday but when i import it, nothing happens. Could someone help me please? My file is located in the downloads folder and when I load the file, ...
1
vote
1answer
82 views

Internal HTTP(s) vulnerabilities

We use Rapidfire + network detective where I work, for doing non-intrusive internal scans on all of our clients' networks. Every week; half of the tickets I get for this are port 80/443 ...
0
votes
0answers
7 views

Relevance and context of software delivery processes

Correct me if I am wrong, ISO 27001 focuses very much on operational and organizational aspects. However in an organization delivering software to a customer as a product or service, what are parts ...
1
vote
0answers
27 views

Secure scanning of git repositories

Is it possible to scan files on a 3rd party gitlab installation before they are downloaded ? In the scenario I'm thinking about colleagues are worried about the potential for malware to be attached ...
0
votes
1answer
101 views

NIKTO: Requires Authentication for realm ''MD5''

I am trying to perform a scanning of a web server using Nikto using: nikto -id id:pass -h xxx.xxx.xx.xxx I am specifying HTTP Basic authentication credentials and indeed with this credentials I can ...
0
votes
3answers
62 views

Scan for infection of malicious files manually?

I know there are options of free security softwares out there that do good job like malwarebytes, but I really want to learn how to scan for possible threats of malicious files on your pc manually. I ...
0
votes
2answers
171 views

How to discover known vulnerabilities (CVEs) in Go executables?

Tools that discover CVEs need to create software bill-of-material. In many cases it can be done simply by inspecting files on the target system e.g. RPM or NPM index. Would it be possible to do ...
0
votes
2answers
90 views

Protecting a web app from unwanted vulnerability scanners

I have a web application and I keep getting unwarranted offers from "security experts" and the results I get are pretty convincing. Somehow, they send me a report of PHP files running and ways on how ...
0
votes
0answers
26 views

Remediation of Security Updates for Microsoft .NET core and ASP.NET (DoS) (July 2018)

We are remediating this vulnerability and would like to know if anyone has been succesfful mitigating this? Related to Nessus plugins: 111070, 111071 Package: Microsoft.AspNetCore.Server.Kestrel....
0
votes
0answers
36 views

Vulnerability scanner connecting to remote registry service is failing

I am trying to perform full vulnerability scans against all of my corporate PCs, servers and laptops. However, I'm unable to read/connect to the target registry despite the 'Remote Registry' service ...
0
votes
0answers
43 views

understand Vulnerability rating used in scanners?

after read this What risk rating models are used for calculating risk scores of web vulnerabilities? this is a somewhat different question , not about scoring systems in general, but their ...
0
votes
1answer
88 views

Server vulnerability scanning [closed]

How can I discover server vulnerabilities without using a scanning software such as openVas? is there any manual ways or steps to follow to assure server security. Thanks in advance
0
votes
0answers
197 views

OWASP ZAP Gateway timeout?

I'm trying to setup ZAP to run as a part of my build definition in TFS. Whenever the build is running, I can see that the call is reaching ZAP and the spider will start scanning. It seems to ...
0
votes
1answer
154 views

Vulnerability scanners for web APIs [closed]

I've built a few web APIs for my company at intellectstorm.com and I'm tasked to test these products by scanning for vulnerabilities. I can't decide on a good tool as yet; so far I've used the ...
1
vote
2answers
43 views

Using SELinux to isolate a binary AV scanner to only doing its job, scanning and detecting

This question is a "would it be possible" rather than a "how to". Can SELinux isolate a binary AV scanner, Kaspersky Endpoint Security for Linux for an example, to only do whats its suppose to do ...
0
votes
1answer
337 views

What is the risk of private IP address disclosure if it is the user IP?

I am checking a web application with OWASP Zed Attack Proxy (ZAP). There is a vulnerability (low) that says "private IP address disclosure" and when I check for more details I found that it is my IP,...
0
votes
0answers
18 views

NMAP multiple IP scanning (specifying ports for every ip) [duplicate]

I am using nmap for daily monitoring the network service and open ports status, i wrote a bash script that scans a range of ip and ndiff the output with previous scans, and make it as a daily cronjob. ...
0
votes
1answer
180 views

over 100 scanner requests 5 min after domain registration

First off, I am no security expert! Yesterday I registered a .cf domain, I needed it for about 10 minutes. About 5 minutes after domain registration I got over 100 scanner requests (I checked all ...
0
votes
0answers
63 views

Machine Learning based application vulnerability scoring

This question is related to an earlier questions: 1 & 2 about the limitations in web application vulnerability scoring/automated vulnerability scoring. Indeed, scoring vulnerabilities detected in ...
0
votes
1answer
82 views

Oracle instance with embedded older version of Java within its directories flagged with numerous vulnerabilities

The issue is an Oracle instance with embedded older versions of Java within the Oracle directories that are being flagged with numerous vulnerabilities. Installing the April 2018 Oracle Java patch ...
1
vote
1answer
1k views

Scan a web application in OpenVAS

As the title says. How can I do it in OpenVAS? The other group has a website for example: https://thiswebsite.com/main.php and in that website there is a web application for example: https://...
-1
votes
1answer
95 views

Attack Surface Analyzer report possible actions [closed]

I am using Microsoft's Attack Surface Analyzer, and I would like to get a better understanding of what would be the best way to mitigate the findings. For example if in my report I get Directories ...
4
votes
1answer
894 views

OpenVAS won't generate SCAP Database

To deploy OpenVAS to Virtual machines I've been using Ansible for a while and it worked pretty well. Now today I wanted to deploy it to another machine but the openvas-check-setup script keeps telling ...
0
votes
0answers
64 views

Nikto output: Siteseed pre 1.4.2 has major security problems

I am performing a pen test on a web application, and one of nikto's results is: "Siteseed pre 1.4.2 has major security problems" I need to manually check this but I'm not sure what it is. I tried ...
4
votes
1answer
89 views

Is it possible to invoke OS commands from a NASL script in OpenVAS?

I was wondering if it is possible to run a command like cat, w3m or any other Operating System (Linux) utility from inside a NASL script and use its output. Do you know any examples? I know you can ...
1
vote
3answers
106 views

nikto's results differ from other vulnerability scanners , is it more or less accurate?

I was doing some scanning on a web application, I used OWASP zap and Nessus. The risks that these two detected were medium to low, very few vulnerabilities. Then I tried nikto, and the results were ...
1
vote
1answer
2k views

Nikto authentication

I am trying to complete a war game on Hell Bound Hackers. I wish to use the nikto scanner to check some pages for vulnerabilities, however I first need to log into the Hell Bound Hackers war game, ...
1
vote
1answer
498 views

Change settings to scan a printer with openvas

I have Openvas 5.1.1 (gui: Greenbone Security Assistant Version 7.0.2). It misidentifies my linux server as a printer. Scan result includes Solution If you want to scan the remote host, uncheck ...
0
votes
1answer
1k views

How to fix Path Disclosure Vulnerability?

I have run a Qualys Web Application Scan for a customer website and found the "Path Disclosure Path-Based Vulnerability". If the normal URL is like this http://example.com/ When I go to the URL http:/...
0
votes
0answers
50 views

How to specify starting point in website using Nessus' “Web Application Tests” scan?

How to specify starting point in website using Nessus' "Web Application Tests" scan? I cannot seem to figure out how to specify the starting point for the vulnerability assessment. In the 'Targets'...
0
votes
1answer
382 views

Detect and Scan Open Ports

I am trying to understand two questions - I run Qualys/Nessus scans on periodic basis in our Azure/AWS environment and always run into issues while detecting for Open ports, A basic nmap scan would ...
12
votes
2answers
2k views

Tons of vulnerabilities are found on tcp/0 port using vulnerability scanners

Performed credentialed Vulnerability scan on linux/Unix servers by Nessus and thousand of vulnerability came out of port tcp/0. How could a IANA reserved port(tcp/0) handle traffic? Are those ...
1
vote
2answers
88 views

After a full web vulnerability scan, do we need to test each & every similar field for possible injections?

I ran a zap scan for my project and found some medium & low level vulnerabilities. But going through some posts, I found that we should run injections (sql, xss, command) on text fields also. But ...
1
vote
1answer
117 views

How is the create-react-app package tree properly sanitized?

React, and it's application creation script, create-react-app, are popular packages nowadays... and with good reason: React is a rock-star framework. From a security perspective, sanitizing all the ...
1
vote
0answers
511 views

Using burp-rest-api, how do I log into my web application in order to scan for vulnerabilities?

I am using the VMWare-developed Burp API (https://github.com/vmware/burp-rest-api) in order to try to automate web application scanning for my application. For an example, if I was attempting to test ...
1
vote
1answer
142 views

How vulnerability scanners identify version of services on targets

I would like to know that how vulnerability scanners identify the version of services running on the target after identifying the service by the port number.
3
votes
1answer
2k views

Potential False Positive while scanning a network with Nexpose - X509 Certificate mismatch [closed]

Little bit of context, we are seeing this finding a lot. We use wildcard certificates on public facing websites. The finding is titled: "X.509 Certificate Subject CN Does Not Match the Entity ...
1
vote
0answers
121 views

How to use a web vulnerability scanner to autenthicate through in order to do the scan

I thinking about use a various mix of different scanner such as: Burp-suite Acunetix Vulnerability Scanner Arachni Owasp Zed Attack Proxy Project Vega W3af though we have Active directory that is ...
1
vote
0answers
51 views

Is my website being checked for vulnerabilities or being attacked? [duplicate]

I have a website running on windows hosting with plesk 11 version and website is based on .net 4.5 by default PHP is also active for this website but is not being used. I have disabled PHP as i am not ...
1
vote
1answer
385 views

OpenVas remediation cipher suites

This is my first time running a vulnerability scan software like OpenVas. It is really a great tool to found out about vulnerabilities in the network. I have found difficult to troubleshoot the ...
8
votes
1answer
817 views

Malformed HTTP requests with repeated protocol (GET /https://https://www.DOMAIN.com) in Apache logs - what vulnerability are they scanning for?

About once per day, I'm seeing the following series of requests in my Apache 2.4 httpd logs, and I'm trying to figure out what vulnerability is being scanned for. Each occurrence of these scans has an ...
1
vote
2answers
405 views

Checking for hardware vulnerabilities (like Intel Management Engine) semi-automated?

Is there a nice semi-automated way that I would just paste output of my /proc, lspci, or any other hardware description and get suggestions to what kind of vulnerabilities a given computer may be ...
1
vote
1answer
89 views

How to transfer the `id` more securely in Rails project?

I checked my rails project with a brakeman, and received warning. Potentially dangerous key allowed for mass assignment: params.require(:inspector_id) class ReportsController < ...
0
votes
0answers
125 views

DVWA setup on XAMPP writable folder and writable file problem

I am using Kali Linux in the VMware Workstation environment. I set up XAMPP successfully but I am running into the problem that is shown below. How do I fix the problem? I have gone directly to the ...
1
vote
1answer
291 views

How fix warnings from Debsecan

I'm new in linux admin and security approach, and need some tips about warnings from Debsecan scanner tool. I have some warnings returned by simple check, like this below: CVE-2017-1000158 python2.7-...
6
votes
2answers
1k views

False positives in OpenVAS

I recently ran the 1st vulnerability scan in my offices network using OpenVAS. We received a great deal of false positives. Mostly I saw that (at least some) tests are unaware of internal patches in a ...
1
vote
0answers
475 views

Lua / OpenResty source code vulnerability scanner [closed]

I am searching for a vulnerability scanner tool for my Lua / OpenResty app, but couldn't find one with simple google search. I am using this tool for scanning our C# applications: https://www....
1
vote
2answers
240 views

Direct Access to Administration Pages ,The web server or application server are configured in an insecure way

Application Security Scan performed on our application using IBM's AppScan standard tool and below issue has been reported. I am a .net developer, and unaware of these security terms. Could somebody ...