Interacting with Vulnerability Scanners
In this chapter, we will learn about OpenVAS vulnerability scanners and the reporting tools that they provide for reporting the vulnerabilities that we find in servers and web applications. Also, we will cover how to use them programmatically with Python via the owasp-zap and python-gvm modules. After getting information about a system, including its services, ports, and operating systems, these tools provide a way to identify vulnerabilities in the different databases available on the internet, such as CVE and NVD.
Both the tools we are about to learn about are vulnerability detection applications widely used by computer security experts when they must perform audit tasks that are part of a vulnerability management program. With the use of these tools, together with the ability to search vulnerability databases, we can obtain precise information on the different vulnerabilities present in the target we are analyzing, and can thus take steps...