Summary
In this chapter, we learned about the OpenVAS and OWASP ZAP vulnerability scanners and the reporting tools that they give us for reporting the vulnerabilities that we find in the servers and web applications we scan. Also, we covered how to use these scanners programmatically with Python, with the python-gvm
and owasp-zap
modules.
The tools we covered in this chapter use different protocols to generate requests to determine which services are running on a remote host or on the host itself. Therefore, equipped with these tools, you can now identify different security risks in both one system and various systems on a network.
In the next chapter, we will identify server vulnerabilities in web applications with tools such as WPScan, which discovers vulnerabilities in and analyzes the security of WordPress sites, and other tools like SQLInject-Finder and Sqlmap, which detect SQL injection vulnerabilities in websites.