vault backup: 2024-12-01 23:50:59

Penetration Testing/Week 7/Lecture 7 - Vulnerability Scanning.md

@@ -0,0 +1,37 @@
+# Classes of Vulnerabilities
+
+- Design: Weaknesses in Software Specifications
+- Implementation: Technical security bugs found in code
+- Operational: Improper config and deployment of system in environment
+
+Operational Vulnerability is likely the worst
+
+# Types of Vulnerabilities
+
+- Local Vulnerability: attacker requires local access to trigger the vulnerability - using a malicious piece of code attacker could escalate access privileges.
+- Remote Vulnerability: attacker has no prior access to system - executing a malicious piece of code over the network could give attacker access.
+
+# Quantification of Vulnerabilities
+
+CVSS: Common Vulnerability Scoring System
+- Uses principle characteristics of a vulnerability to produce a numerical score reflecting severity. Can be translated into qualitative representation (low->critical) to help organisations assess and prioritise vulnerability management processes
+- https://www.first.org/cvss
+
+# Attack Patterns
+
+CAPEC: Common Attack Pattern Enumeration and Classification
+- Catalogue of common attack patterns that helps users understand how adversaries exploit weaknesses in applications and other capabilities.
+- https://capac.mitre.org/
+
+# Search for Vulnerabilities
+
+- https://cvedetails.com
+
+# Vulnerability Scanning
+
+- Process of using automated tools to discover and identify vulnerabilities in a network
+- Range from simple scripts to commercial software engines that scan for thousands of vulnerabilities
+- Can generate alot of traffic, and may result in denial of service on many devices.
+
+## Nessus
+

Penetration Testing/Week 7/Workshop 7 - ping and traceroute.md

@@ -0,0 +1,12 @@
+## Cogent Frankfurt -> remote.salford.ac.uk
+Cogent [AS174](https://bgp.he.net/AS174)
+Arelion [AS1299](https://bgp.he.net/AS1299)
+JISC (Salford Edge) [AS786](https://bgp.he.net/AS786)
+remote.salford.ac.uk (Announced by JISC) [AS786](https://bgp.he.net/AS786)
+
+## Hetzner -> remote.salford.ac.uk
+Hetzner [AS24940](https://bgp.he.net/AS24940)
+core-backbone [AS201011](https://bgp.he.net/AS201011)
+LINX London [AS3491](https://bgp.he.net/AS3491)
+JISC (Salford Edge) [AS786](https://bgp.he.net/AS786)
+remote.salford.ac.uk (Announced by JISC) [AS786](https://bgp.he.net/AS786)