In this section of the course,
we're going to focus on the tools to help us
in Vulnerability Discovery.
Vulnerability Discovery Tools
are specialized software used to find weaknesses
in networks and systems.
They are important, because they automate the process
of checking for known issues,
making it faster and easier to spot problems
before bad guys do.
Our focus in this section will be centered around Domain 3,
Vulnerability Discovery and Analysis.
Objective 3.1 will be our main focus in this section,
which states that given a scenario,
we must be able to conduct vulnerability discovery
using various techniques.
First, we'll kick things off by exploring the tool, Nikto,
in a hands-on demo.
Nikto is a web server scanner,
which is a great way to find outdated software
and harmful files on web servers,
making it a must-know tool for penetration testers.
Next, we'll discuss OpenVAS, a vulnerability scanning
and management framework developed by Greenbone.
This open-source tool provides a lot of great options
for identifying and managing system vulnerabilities.
Trivy is up next, which is a simple and
comprehensive scanner
that you'll use to find vulnerabilities in your containers.
Often used in cloud environment,
making sure that they're locked down tight.
After that, we'll discuss BloodHound,
which uses a graph theory to reveal hidden
and often unintended relationship
within Windows Active Directory environment.
It's like a roadmap that shows us
how an intruder could move through a network.
Moving on to PowerSploit.
We'll walk through a demo
of a collection of Microsoft PowerShell modules
that can be used to help a penetration tester
during all phases of the assessment,
automating complex steps and uncovering hidden information.
Next, we'll discuss Grype,
a vulnerability scanner designed for container images
and file systems.
Its primary job is to help identify vulnerabilities
in our software containers.
After that, we'll perform another demo using Kube-hunter.
Kube-hunter hunts down security weaknesses
in Kubernetes clusters,
which are systems used to manage containerized applications,
ensuring that they're not vulnerable to attacks.
And in the last lesson, we'll look at TruffleHog.
This tool digs through repositories
to find hidden secrets like passwords or API keys
that have accidentally been left in the code,
helping to prevent potential security breaches.
Finally, we'll take a short quiz
to see what you learned during this section of the course,
and review each of those quiz questions fully
to ensure that you can explain why each answer was right.
So if you're ready to learn about the tools
that uncover hidden security gap,
let's begin our section on Vulnerability Discovery Tools.