Vulnerability Scanning with OpenVAS

The video tutorial by Toby from Oine Security covers the essentials of vulnerability scanning using OpenVAS on Kali Linux. It explains the setup process, configuration of scan targets, and running scans. The tutorial also delves into analyzing scan results and understanding CVE details and severity scores. Despite some technical delays, the video provides a comprehensive guide to conducting vulnerability scans and emphasizes the importance of identifying and prioritizing vulnerabilities for remediation.

Why is vulnerability scanning considered an essential skill in cybersecurity?

• It helps in identifying and prioritizing vulnerabilities.

• It is only useful for large organizations.

• It is a mandatory requirement for all IT jobs.

• It is used to create new software applications.

Which tool is mentioned as a free vulnerability scanner used in many organizations?

• Nessus

• Wireshark

• OpenVAS

• Metasploit

What is the default username and password for logging into OpenVAS as mentioned in the tutorial?

• admin and password

• root and toor

• admin and admin123

• user and user123

What type of scan provides more detailed information by using credentials to log into the system?

• Discovery scan

• Quick scan

• Non-credential scan

• Credential scan

What is the purpose of setting up targets in OpenVAS?

• To configure network settings

• To define the systems that will be scanned

• To create user accounts

• To install software updates

Which scan type is mentioned as being 'full and fast'?

• Discovery scan

• Credential scan

• Non-credential scan

• Full and fast scan

What kind of information is typically found in log-level severity results?

• Informational statistics

• Critical vulnerabilities

• High-risk exploits

• System errors

What is the significance of the CVE number in vulnerability management?

• It is used to log into systems.

• It is a type of encryption key.

• It identifies a specific exploit.

• It is a software version number.

Which website is used to track exploits and provides detailed information about CVEs?

• MITRE

• All of the above

• NVD

• Exploit-db.com

What happens to the CVSS score of a vulnerability if it can compromise the network?

• It remains the same

• It increases

• It becomes zero

• It decreases