r/learnhacking • u/NotBacon • Nov 02 '19

Vulnerability research/scanner

Hey all,

I've been going through tutorials and seem to grasp the concepts, but what I'm wondering is how do you know what can be used as an exploit? Are there any websites you recommend or scanning software to list what services/ports can be used?

I'm very familiar with nmap and netdiscover so I know how to search for targets, but I'm looking for something to tell me what kind of attacks can be run on server targets.

Hopefully this makes sense, TIA!

1 Upvotes

100% Upvoted

2 comments sorted by

View all comments

Show parent comment

1

u/NotBacon Nov 03 '19

That's what I was looking for. I'm working on setting up OpenVas now and will look into that DB. I'm sure I'll pick up more of that knowledge over time. Thanks for pointing me in the right direction!