OverviewStart here2 min
Vulnerability Analysis
Find known weaknesses and rate them with CVSS.
About this module
Enumeration (Module 4) gave you targets. Vulnerability analysis is where you find the known weaknesses in those targets, rate how serious each one is, and plan the fix. It is the bridge between finding things and attacking them — and it is just as important to the defender, who runs the same scans to patch first.
What you will learn
- What a vulnerability is vs a threat and a risk
- CVE, CVSS, NVD, CWE and EPSS
- How weaknesses are classified
- Vulnerability assessment and its types
- The vulnerability management life cycle
- How scanners work, reports, and AI
Module roadmap
01Vulnerabilities & ResearchLesson 1 · ~4 min
02CVE, CVSS, NVD, CWE & EPSSLesson 2 · ~5 min
03Vulnerability ClassificationLesson 3 · ~4 min
04Vulnerability Assessment & Its TypesLesson 4 · ~5 min
05The Vulnerability Management Life CycleLesson 5 · ~5 min
06How Scanners Work & Choosing a ToolLesson 6 · ~4 min
07Vulnerability Assessment ReportsLesson 7 · ~4 min
08AI in Vulnerability ManagementLesson 8 · ~4 min
09Lab: Scan & Rank VulnerabilitiesLab · ~45 min
10AssessmentAssessment · ~5 min
How to study: read a lesson → answer its 2 "Check yourself" questions → do the lab → pass the assessment with 80%+. Lessons 2, 4 and 5 are the most tested. You will scan the Metasploitable VM from the Module 1 lab.