In this section of the course,
we're going to cover the ins and outs
of Discovering Vulnerabilities.
Discovering vulnerabilities is all
about finding the weak spots in the software systems
where bad guys could potentially break in.
It's an important task
because the earlier we find these weaknesses,
the sooner we can use them for our own exploits.
Our focus in this section
will be centered around Domain 3,
Vulnerability Discovery and Analysis.
We'll be honing in on Objective 3.1,
which tells us that given a scenario,
we must conduct vulnerability discovery
using various techniques.
We'll start off this section with Application Scanning,
which simply means we'll be examining applications
to find flaws that could be exploited.
Software Analysis is up next,
where we'll assess software components
for known vulnerabilities.
This will involve looking at the raw code itself
and checking if it was written
with the best security practices.
Next, we'll discuss Host-based Scanning,
which will involve us examining individual computers
to find any security issues that they might have.
Here, we'll be learning about the differences
between authenticated and unauthenticated scans.
We'll then discuss Network Scanning,
which allows us to cast a wider net,
looking at the entire network for potential vulnerabilities.
We need to know how to quietly scan a network
and to make sure that we don't trip off any alarms.
Next up, we'll talk about Mobile Scanning,
which just focuses on finding vulnerabilities
in mobile applications and devices,
which are becoming more and more popular these days.
Then, we'll walk through a Container Scanning demo.
Containers are a more efficient way
of handling virtualization,
but have their own unique benefits and risks
that we must account for.
Moving along, we'll discuss Scanning IaC,
or Infrastructure as Code.
This helps us spot problems
in the way network resources are configured,
and managed using code.
Next, we'll discuss ICS Vulnerability Discovery,
in which we will dive into industrial control systems,
where we'll focus on manual assessments
and using port mirroring,
allowing real-time analysis
without disrupting their operations.
Then, we'll discuss Wireless Scans,
which simply help us identify
any vulnerabilities in wireless networks,
which are notoriously more susceptible
for certain types of attacks.
And in the last lesson,
we'll do a Static Code Analysis using SonarQube
and another hands-on demo.
This will give us a close look
at how code itself can be analyzed for weaknesses.
Finally, we'll take a short quiz to see
what we learned during this section of the course,
and review each of those quiz questions fully
to ensure that you can explain
why the right answer was right.
If you're ready to begin our journey in the world
of vulnerability discovery, let's get started.