But now we already know how to do vulnerability assessments on multiple different platforms and
targets. And what we're taking a look at here is OpenVAS being ran against the Ubuntu
virtual machine inside of our lab environment. The reason that we're doing this is to go back
and brush up on our skills real quick. And also I have the skill below in case we do need to
brush up a little bit more. But I wanted to touch on this and really get into understanding
some of the key components of vulnerabilities. And here we're getting an understanding of software
and kernel vulnerabilities. As we dive a little bit deeper into the results,
first you can see that I've taken a look at the actual overall information tab of the scans that
I've ran. I've ran three or four scans on this target. And we get results back from each one
of these, along with different vulnerability assessments. If I go into the results of our
scans, you can see here, and I will zoom in for us real quick, you can see we already start off
with something along the lines of allowed HTTP methods enumeration. You can go through here and
get a very good assessment of what's actually going on with not only the vulnerabilities that
are reported, but the idea of the different types of software that is installed. Because here we
have Apache installed, and we may have some other things like, you know, OpenVAS on the Kali system,
and some of the other apps that we've installed throughout our time together in this course.
In addition, the actual kernel versioning itself. Now where can you go inside of an operating system
like Ubuntu, for example, and get the kernel information? And why is this important? Well, I'm
taking a look at the actual system details. You can do a search inside the GUI start menu for system,
and go into system details. And you can see that we are running Ubuntu 2.4.0.4.3 LTS.
That's important, but less important than the one on the bottom that actually points out the actual
kernel version itself. And this is the actual nuts and bolts of the POSIX-based Linux that we're
using underneath the hood of Ubuntu. You see all this wonderful GUI stuff that we're using
inside of our operating system here is nothing more than just a flavor put on top of Linux.
And the actual Linux kernel version is what we're taking a look at, because it's very possible
that there are versions of Linux like Ubuntu and let's say Rocky Linux that use the same kernel
version. Theoretically, there are vulnerabilities and exploits against a particular kernel version
that can be used for both regardless of the operating system's name and more targeted on the
actual kernel version itself. So in this particular case, we're using 6.14033 generic,
and you can go back and take a look at results inside of OpenBOS or whatever vulnerability
scanner that you have and see what vulnerabilities are common to that. And the two commands to give
us the actual detailed information inside the terminal are lsb underscore release dash a
and uname. Now I'm using the dash a on uname to give me all the details commands below in the
code box. But as you can see here, we get everything straight to the point that we saw in
the actual GUI representation of this. And it's good to know these commands too, because we may
not always have the GUI. And again, I would challenge you to be able to go out and test
your different operating systems in the POSIX space world and see if they're sharing any kernels.
For example, here 6.14033 generic.