Infrastructure vulnerability assessment with Bash

Assessing infrastructure vulnerabilities is a critical step in maintaining network security. With Bash, we can leverage powerful tools to automate network host discovery and vulnerability scanning, streamlining the assessment process. This section covers two essential techniques: identifying network hosts with NetExec and automating vulnerability scans using Greenbone. Each technique offers a practical approach to improving your security posture by reducing manual effort while enhancing efficiency and accuracy in detecting vulnerabilities.

Enumerating network hosts with NetExec

Starting from an unauthenticated perspective, we will examine TCP port 445 since it’s historically had a lot of vulnerabilities and can yield a lot of information. We will use the NetExec tool to enumerate network hosts.

First, let’s attempt to use an SMB null session to enumerate SMB shares. Run the following command, replacing the network...