Vulnerability Scanning

Adversaries may scan victims for vulnerabilities that can be used during targeting. Vulnerability scans typically check if the configuration of a target host/application (ex: software and version) potentially aligns with the target of a specific exploit the adversary may seek to use.

Tools we can used for automate scanning:

• Shodan

• Censys

• Hunter.how

• nuclei-templates

• urlscan.io

• Nmap

• ExploitDB

• Inteltechniques.com