Plugins vs Engines?

• One off vs interchangable system

Engines

• Vulnerability Correlation Engine
  • Vulners
  • NVD
• Port Scanning Engine
  • Nmap

Discover Live Systems

• Nmap Discovery Custom -PS

Discover Ports

• Nmap default

Discover Service Version

• Nmap -sV
  • Split port/service/banner/version
  • Correlate into salient options
  • Try match to global services file
  • ID protocol/service/application => iterate on application if stack such as web
• Nmap --script discovery
• Custom discovery scripts

Vulnerability Correlation

• Vulners (deconflict duplicate CVEs)

Vulnerability Identification

• Nmap --script vuln (Sirius profiles long term)

Authenticated Checks

• Vulners Agent?
• Windows WUA???
• NSE authenticated script support

Reporting