Dictionary · Hacking Techniques and Methodologies
Vulnerability Assessment
Assessment phases · Intermediate
A systematic look for known weaknesses and risky settings on systems in scope, usually with a scanner plus human review. It identifies issues; it does not have to demonstrate abuse.
The product is a prioritized list of weaknesses. A person still confirms what is real and what matters. Fixing and retesting close the loop.
Example: A quarterly assessment lists missing patches on the server VLAN. Each item is patched or formally accepted.
Common misconception
- A scanner report is not a finished assessment. False positives and business impact still need a person.