Assignment
Prepare a vulnerability scanning report that will be prepared as the initial phase of a penetration
testing engagement. The goal of the scan is to identify weaknesses that are most likely to succeed
in gaining access to a network.
You have permission to execute an unrestricted vulnerability scan against the target network
range 192.168.42.1 - 192.168.42.100.
Reporting
The vulnerability scanning report must contain the following sections:
1. Scope and objective of engagement. This information must be presented in normal business-
style written English and should consists of no more than three of four paragraphs. Tools must be
listed using their name and version numbers. For example, mention that these scans were
conducted with Nessus Community Edition version 10.1.0.
2. Methods and tools used. This information must be presented in normal business-style written
English and should consists of no more than three of four paragraphs. Mention what kind of scan
you ran and what changes you made to any defaults set by the product. That way, the reader
could consider reproducing your results.
3. Prioritized findings. A prioritized list of findings. For each vulnerability, include reference to
CVE, CVSS, product/service affected, and a (brief) description of the mechanism of attack.
Vulnerabilities that are unlikely to result in access to systems must be listed, but can be simply
presented in an appendix as a table containing Product, CVE, CVSS. General comments When
writing a report, always make sure to include a title page that contains title, author, date, etc.
Avoid essay-style reports. Be complete but concise. Stick to the provided structure.
" I NEED HELP IN THIS REPORT".
AssignmentPrepare a vulnerability scanning report that will be pre.pdf
1. Assignment
Prepare a vulnerability scanning report that will be prepared as the initial phase of a penetration
testing engagement. The goal of the scan is to identify weaknesses that are most likely to succeed
in gaining access to a network.
You have permission to execute an unrestricted vulnerability scan against the target network
range 192.168.42.1 - 192.168.42.100.
Reporting
The vulnerability scanning report must contain the following sections:
1. Scope and objective of engagement. This information must be presented in normal business-
style written English and should consists of no more than three of four paragraphs. Tools must be
listed using their name and version numbers. For example, mention that these scans were
conducted with Nessus Community Edition version 10.1.0.
2. Methods and tools used. This information must be presented in normal business-style written
English and should consists of no more than three of four paragraphs. Mention what kind of scan
you ran and what changes you made to any defaults set by the product. That way, the reader
could consider reproducing your results.
3. Prioritized findings. A prioritized list of findings. For each vulnerability, include reference to
CVE, CVSS, product/service affected, and a (brief) description of the mechanism of attack.
Vulnerabilities that are unlikely to result in access to systems must be listed, but can be simply
presented in an appendix as a table containing Product, CVE, CVSS. General comments When
writing a report, always make sure to include a title page that contains title, author, date, etc.
Avoid essay-style reports. Be complete but concise. Stick to the provided structure.
" I NEED HELP IN THIS REPORT"
