Lion Cipher Lab
Run an authenticated vulnerability scan against your OWN lab target
- Penetration Testing / Red Team
- Beginner
- ~90 min
- Free · no account required
Why it matters
Enumeration told you which specific service and version each open port is running. A vulnerability scanner is the tool that takes that inventory and checks it, automatically and at scale, against tens of thousands of published checks: known CVEs, missing patches, weak configurations, and default credentials. It is the same tooling a blue team runs against its own estate every week to find the outdated service before an attacker does, and the same tooling an authorized tester runs at the start of an assessment. The scan itself is the easy part. The skill that matters, and the one this lab is…
What you'll learn
- what a vulnerability scanner does
- deploying Greenbone Community Edition with Docker
- creating a scan target and task
- authenticated (credentialed) scanning
- reading a scan report
- CVSS severity and CVE references
- triage and prioritization
- authorized-use discipline
Steps in this lab
- The one rule, before you scan anything
- What a vulnerability scanner actually does
- Stand up Greenbone Community Edition with Docker
- Start it, set a real password, and open the web interface
- Create a target for your own lab host
- Run the scan
- Read the report: severity, CVSS, and CVE
- Triage: turn the wall of findings into a prioritized list
- What you just did, and why triage is the whole skill