Security Vulnerability Testing Notes

Security Vulnerability Testing

This document outlines a security vulnerability testing process, covering aspects from IP address location to vulnerability impact and mitigation strategies.

Executive Summary

Systems

  • Cybox: Unix OS

  • Vulinx: Linux OS

  • Protocols: ICMP, TCP, UDP, PIM, IGMP

Network Services

  • Cybox: Apache2.2.17, POP3, HTTP

  • Vulinx: SSH, SMTP, RPCBIND

Host Enumeration

  • MAC Address (Cybox): 00:C0:29:69:0E:47

  • MAC Address (Vulinx): 00:C0:29:2A:11:AA

Vulnerabilities

Vulnerabilities are identified for both Cybox and Vulinx systems.

Impact & Action

  • Risk: RCE (Remote Code Execution) & privilege escalation (requires specific editing).

  • Action: Patch systems, secure services.

Locating IP Addresses of Virtual Machines

  • Before any changes in the Virtual Network Editor, verify the IP address of the Parrot OS.

  • The ifconfig command is used in the terminal to identify the IP address assigned to the system.

  • The IP information is then used to configure the virtual machine's network settings.

  • The virtual machine's network settings are configured to ensure they are on the same subnet as the host machine, based on the obtained IP address.


  • The following command is used for the scan: nmap -sn 172.16.32.0/24

    • This command performs a ping sweep across the 172.16.32.0/24 range to identify online devices.

  • Initial scan using nmap -sn detected 5 active hosts.

  • A detailed service/version scan was performed using: nmap -Sv 172.16.32.0/24

  • Analysis of the scan results accurately identified the IP addresses connected to Cybox and Vulinx.

Effective Protocol Scanning

  • A Protocol scan nmap -oS scan was conducted on the Cybox machine revealing information about open ports on the Vulinx system.

  • A protocol scan was executed with the command nmap -O on the Vulinx machine.

  • The scan highlighted the open /filtered ports on the Vulinx system.

Analyzing the Operating System Scanning

  • A thorough operating system scan was executed on the entire 172.16.32.0/24 network using the nmap -Sv –O command.

  • The scan identifies active hosts and gathers information regarding their services, versions, and operating systems.

  • An nmap -Sv –O scan was executed for Vulinx 172.16.32.3/24 network, providing insights into its operating system.

Network Services Scan

  • An nmap -A scan was successfully performed on the Cybox 172.16.32.2/24 network.

  • The scan yielded insights into the available network service for strengthening security measures and refining network management strategies.

  • An nmap -A scan on the Vulinx 172.16.32.3/24 network, providing detailed insights into the active network services.

Host Enumeration

  • An nmap -traceroute scan on the Cybox 172.16.32.2/24 network, providing essential insights into the network services that are currently available.

  • An nmap-traceroute scan on the Vulinx 172.16.32.3/24 network, providing essential insights into the network services that are currently available.

Scanning Client and Server for Vulnerabilities

Scanning for vulnerabilities on both Cybox and Vulinx systems.

List of Vulnerabilities

Vulnerabilities lists for both Cybox and Vulix.

Common Vulnerabilities

Common vulnerabilties for both Cybox and Vulix.

Exposure Identifier (CVE ID)

Exposure identifier for both Cybox and Vulix.

Severity Level

Cybox

  • ssl-ccs-injection:

    • VULNERABLE: SSL/TLS MITM vulnerability (CCS Injection)

    • State: VULNERABLE

    • Risk factor: High

    • Vulnerability details reference OpenSSL versions before specific patches (0.9.8za, 1.0.0m, 1.0.1h).

    • Description includes the vulnerability allowing man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications.

    • This can lead to hijacking sessions or obtaining sensitive information via a crafted TLS handshake, aka the "CCS Injection" vulnerability.

Vulinx

Severity level details for Vulinx are provided.

Vulnerability Impact

Impact of listed vulnerabilities for both Cybox and Vulinx.

Prevention and Mitigation Strategies

Strategies for preventing and mitigating vulnerabilities.