PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What is Vulnerability Scanning? [And How to Do It Right]

hackerone.com | vulnerability | #vulnerability-management | #network-security | #vulnerability-scanning | #hackerone | #guide
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An explainer on vulnerability scanning: how scanners probe computers, networks, and equipment for exploitable weaknesses, plus coverage of hacker-powered, internal, and other scan types.
Published
Collected

Related coverage

blog · netspi.com
The Systems That Time Forgot
Forgotten test and legacy systems that escape asset management become easy entry points for attackers. The author outlines practical steps for discovery, inventory, and ownership.
vulnerability · hackerone.com
Vulnerability Management | A Complete Guide and Best Practices
A guide to vulnerability management: continuously discovering, prioritizing, and remediating weaknesses across networks, operating systems, applications, and misconfigurations.
vulnerability · hackerone.com
Vulnerability Testing | Best Techniques for Assessing Risks
Introduces vulnerability testing techniques, covering assessments, automated scanning, and penetration testing, and how finding flaws early reduces the chance of unauthorized access.
vulnerability · hackerone.com
Vulnerability Assessment Tools [Top Tools & What They Do]
Surveys popular vulnerability assessment tools, what they do, and their pros and cons, from ranking flaws for remediation to continuous scanning of networks and applications between pentests.
vulnerability · bishopfox.com
[CVE-2026-67279] MikroTrick: Inside the RouterOS Takeover Chain
Bishop Fox reproduced the MikroTrick RouterOS takeover chain, using CVE-2026-67279 and a second flaw for unauthenticated admin access on 7.x, and confirmed real devices were already compromised.
vulnerability · bishopfox.com
CVE-2022-1388: Scan BIG-IP for Exact Release Versions
Bishop Fox released a scanner that fingerprints exact F5 BIG-IP software versions from HTTP responses, helping defenders quickly assess exposure to CVE-2022-1388, a critical auth-bypass RCE.
Back