So what are these Nessus plugins that I keep referring to in the previous skill
and also
dive into this one?
Well, I'm glad you asked.
And we're going to take a look at a couple of them and explain them along the
way.
Now I'm going to have the links for these below, but what we're taking a look
at here
is on the tenable.com website for actual plugins.
And these address either a specific vulnerability or something that just needs
to be looked
out for.
Basically, we're adding definitions to Nessus as we detail out our scan
criteria for vulnerabilities.
Now this particular website link that I'm sending you is for the latest and
greatest.
As you can see on the top right as I zoom in for you right there, you can see
the newest
plugins, updated plugins, newest Nessus, etc.
And if I zoom in down to the bottom for you real quick, you can see that there
is an ID
of 238-503 and that is for a fedora vulnerability.
Now we can go into one right here.
I'm going to right click on this first one that we brought up and go into the
next page
for you.
And what you'll start to see is something very similar to when we ran our first
scan
and took a look at one of the actual vulnerabilities.
It gives us the actual synopsis, description, solution, and also some more
information about
it to include the CVSS scoring information if available.
And this one does have it because there is a CVSS version 3 right here that I
've highlighted
for us that I will zoom in on.
And you can see that this one is a pretty high score, 6.5, and therefore is
rated inside
of the medium category.
And you have the vector assignments detailing how this particular vulnerability
and plugin
says that this exploit can be leveraged against the actual system.
Now again, definitely go back and check out the CYSA course here on CBT Nuggets
because
a lot of this CVSS information to include the scoring and how it's all brought
together
is definitely brought up inside of that particular course.
The only thing that really matters to us as far as CVSS scoring is not
necessarily the
score, but getting to understand the actual vector assignments that are in this
particular
vulnerability.
And this allows us to be able to understand how we can access it, either it's a
physical
system or across the network, how we, what kind of user credentials do we need
if any.
And really the complexity level required in order to be able to leverage this.
And we can go back one page real quick.
I'm going to close this one and go back to our list here right here.
And we can even search through the plugins on their actual website.
And I'm just going to type in Windows 11 and do a search.
And you can see here that we already have a few that come up along the way.
And I'm just going to right click on the first highway that comes up.
And it tells you specifically that this is for KB4571719.
And even though I searched for Windows 11, this one came up.
So it must have something to do with Windows 11 in some way, even though we're
starting
out with Windows 7 and server 2008 and 2020 update.
Now you can see that there's a whole lot more information on this because this
vulnerability
is a CVE-2020.
Meaning it came out in the year 2020, so it's been around for a little bit and
has a lot
of research done to it.
In addition, you can see that the referencing for this is listed very heavily
inside of the
actual plugin information itself.
Now the reason that I wanted to bring this up and we're going to pop over here
momentarily
is because based on this plugin information, we should, by default inside of
Kelly, be
able to look for this information and dig up a little bit of a heads up to what
we can
actually scan for.
In order to do that, we can go back one more time on our actual plugin search
here.
And since we know that something on our network is Microsoft related and
specifically a Windows
10 system, oh I only searched Windows my bad.
We can start searching for Windows 10.
Now you can add filters here based on the actual product and, excuse me, that's
a filter's
relevance and you can say newest, most updated, you can even look for based on
CVSS scoring.
But based on a quick Windows 10 search, and I'm going to go to the first high
which is
10.10064 and go inside of here, oh this one's a critical.
So if it's a critical inside of here, that means it's going to be pretty high
on the
CVSS scoring and that's a 9.8.
And it tells you the different systems that are affected by it to include
versioning information
for Windows.
Now along with this comes all the basic information that we have as well.
But one thing I wanted to point out too is that Nesys plugin ID 100464.
And this allows us to be able to go inside of our Nesys interface and search
specifically
for this particular plugin which is what we're going to be doing next.