<!-- [ Main Content ] start -->
<div class="pcoded-main-container">
	<div class="pcoded-content">
		<!-- [ breadcrumb ] start -->
		<div class="page-header">
			<div class="page-block">
				<div class="row align-items-center">
					<div class="col-md-12">
						<div class="page-header-title">
							<h5 class="m-b-10">VAPT: Vulnerability Assessment Penetration Testing</h5>
						</div>
						<ul class="breadcrumb">
							<li class="breadcrumb-item"><a href="admin.php?page=dashboard"><i class="feather icon-home"></i></a></li>
							<li class="breadcrumb-item"><a href="#!">VAPT</a></li>
							<li class="breadcrumb-item"><a href="#!">Read Notes</a></li>
						</ul>
					</div>
				</div>
			</div>
		</div>
		<!-- [ breadcrumb ] end -->
		<!-- [ Main Content ] start -->
		<div class="row">
			<!-- [ basic-collapse ] start -->
			<div class="col-sm-12">
				<div class="card">
					<div class="card-header">
						<h5 class="mb-0">Course: Vulnerability Assessment Penetration Testing</h5>
						<hr>
						<a class="btn  btn-primary  m-t-5" data-toggle="collapse" href="#collapseExample" role="button" aria-expanded="false" aria-controls="collapseExample">View Content</a> 
					   <button class="btn btn-primary  m-t-5" data-toggle="modal" data-target=".bd-example-modal-lg"role="button" aria-expanded="false" aria-controls="collapseExample">PREVIEW NOTES</button> 
					</div>
					<div class="modal fade bd-example-modal-lg" tabindex="-1" role="dialog" aria-labelledby="myLargeModalLabel" aria-hidden="true">
							<div class="modal-dialog modal-lg">
								<div class="modal-content">
									<div class="modal-header">
										<h5 class="modal-title h4" id="myLargeModalLabel">VAPT: Vulnerability Assessment Penetration Testing</h5>
										<button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
									</div>
									<div class="modal-body">
										<iframe
		                                    src="assets/pdf/vapt_presentation.pdf"
		                                    width="100%"
		                                    height="500"
		                                    style="border: none;"
		                                  >
		                                    <p> 
		                                      <a href="assets/pdf/vapt_presentation.pdf">Download the PDF</a> 
		                                    </p>
		                                  </iframe> 
									</div>
								</div>
							</div>
						</div>
					<div class="collapse" id="collapseExample">
						<div class="card-body"> 
								<p class="p-3 text-justify" style="word-spacing: 6px;">
        						AGENDA
        						<ul style="list-style: inline; word-spacing: 6px;">
        							<li style="word-spacing: 6px;">
        								What is vulnerability Assessment
        							</li>
        							<li style="word-spacing: 6px;">
        								What is Penetration Testing
        							</li>
        							<li style="word-spacing: 6px;">
        								Types of Testing
        							</li>
        							<li style="word-spacing: 6px;">
        								Steps Involved in VAPT process
        							</li>
        							<li style="word-spacing: 6px;">
        								Some images
        							</li> 
        							<li style="word-spacing: 6px;">
        								Tools Which you can use
        							</li> 
        							<li style="word-spacing: 6px;">
        							Top common vulnerability
        							</li> 
        							<li style="word-spacing: 6px;">
        								Demo
        							</li>  
        						</ul> 
                                </p> 
						</div>
					</div>
				</div>
			</div>
		  
			<div class="col-sm-12 mb-3">
				<h5 class="mb-3">Introduction of vulnerability Assessment</h5>
				<hr>
				<div class="col-sm-12">
                <div class="card">

                    <div class="card-header">
                        <h5>What is Vulnerability Assessment</h5>
                        <div class="card-header-right">
                            <div class="btn-group card-option">
                                <button type="button" class="btn dropdown-toggle btn-icon" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
                                    <i class="feather icon-more-horizontal"></i>
                                </button>
                                <ul class="list-unstyled card-option dropdown-menu dropdown-menu-right">
                                    <li class="dropdown-item full-card"><a href="#!"><span><i class="feather icon-maximize"></i> maximize</span><span style="display:none"><i class="feather icon-minimize"></i> Restore</span></a></li>
                                    <li class="dropdown-item minimize-card"><a href="#!"><span><i class="feather icon-minus"></i> collapse</span><span style="display:none"><i class="feather icon-plus"></i> expand</span></a></li>
                                    <li class="dropdown-item reload-card"><a href="#!"><i class="feather icon-refresh-cw"></i> reload</a></li>
                                    <li class="dropdown-item close-card"><a href="#!"><i class="feather icon-trash"></i> remove</a></li>
                                </ul>
                            </div>
                        </div>
                    </div>
                    <div class="card-body"> 
                        
						  
						<h5>1.1 What is Vulnerability Assessment</h5>
						<p class="p-3 text-justify" style="word-spacing: 6px;"><b>VA</b> is a technical approach to find the security loopholes in a network , software or system.
                        It primarily adopt a scanning which is done both manually and performed by a certain tool.
                        The outcomes of VA is a report showing all vulnerabilities, which are categorized based with their severity.
                        This report which is further used for the next phase which is penetration testing(PT).

                        </p>
                        <h5>1.2 What is penetration testing(PT)</h5>
						<p class="p-3 text-justify" style="word-spacing: 6px;">A Penetration test(PT), is a PoC approach actually explored and exploit vulnerabilities. Which means that whenever the Vulnerability exist further exploitation steps are taken into exploiting them. The outcomes of a PT is typically, evidence in the form of a screenshot or log, which substantiates the finding and can be useful aid toward remediation.
                        </p>
                        <h5>1.3 TYPES OF TESTING</h5>
						<p class="p-3 text-justify" style="word-spacing: 6px;">
						There are Mainly 3 types of Testing
						<ul style="list-style: inline; word-spacing: 6px;">
							<li >
								BLACKBOX TESING
							</li>
							<li >
							    GRAYBOX TESTING
							</li>
							<li >
							   WHITEBOX TESTING
							</li>
							 
						</ul> 
                        </p>
                        <p class="p-3 text-justify" style="word-spacing: 6px;">Black Box does not include any knowledge of the structure of the system, so this type of testing simulates the approach of an outsider attacker.
Gray Box Includes only a limited knowledge of te layout of the target
White Box testing occurs  when a penetration tester has a complete knowledge of the target structure or layout.

                        </p>
                          
                    </div>
                </div>
            </div>
			</div>  
			<div class="col-sm-12 mb-3">
				<h5 class="mb-3">VAPT without a methodology is like a chicken without a head</h5>
				<hr>
				<div class="col-sm-12">
                <div class="card">

                    <div class="card-header">
                        <h5>VAPT</h5>
                        <div class="card-header-right">
                            <div class="btn-group card-option">
                                <button type="button" class="btn dropdown-toggle btn-icon" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
                                    <i class="feather icon-more-horizontal"></i>
                                </button>
                                <ul class="list-unstyled card-option dropdown-menu dropdown-menu-right">
                                    <li class="dropdown-item full-card"><a href="#!"><span><i class="feather icon-maximize"></i> maximize</span><span style="display:none"><i class="feather icon-minimize"></i> Restore</span></a></li>
                                    <li class="dropdown-item minimize-card"><a href="#!"><span><i class="feather icon-minus"></i> collapse</span><span style="display:none"><i class="feather icon-plus"></i> expand</span></a></li>
                                    <li class="dropdown-item reload-card"><a href="#!"><i class="feather icon-refresh-cw"></i> reload</a></li>
                                    <li class="dropdown-item close-card"><a href="#!"><i class="feather icon-trash"></i> remove</a></li>
                                </ul>
                            </div>
                        </div>
                    </div>
                    <div class="card-body"> 
                        
						  
						<h5>1.4 STEPS INVOLVED IN VAPT PROCESS</h5> 
						<p class="p-1 text-justify" style="word-spacing: 6px;"> 
						<ul style="list-style: roman; word-spacing: 6px;">
							<li >
							Gathering information about the target
							</li>
							<li >
							  Based on the previous info,perform manually vulnerability assessment and automatic assessment
							</li>
							<li >
							  Manually testing vulnerabilities based on step two for valid bugs and automate the vulnerability if its too complex
							</li>
							 	<li >
							   Exploiting vulnerability, further for privilege escalation or chain vulnerabilities more for privilege escalation
							</li>
								<li >
							   Maintaining access and pivoting for more network resources
							</li>
								<li >
							    Repeat the above steps for all vulnerabilities
							</li>
							<li >
							    Prepare a well and polished final report of testing for all technical and non technical people
							</li>
						</ul> 
                        </p>
                        <p class="p-3 text-justify" style="word-spacing: 6px;">NOTE:  Not all vulnerabilities will reach to privilege escalation as you might be limited based on environment for vulnerability itself
                        </p>
                        <center> <h5>VAPT Framework</h5></center>
						<p class="p-1 text-justify" style="word-spacing: 6px;"> 
					       <center><img src="assets/images/frame.png" alt="" class="logo"></center>
						 </p>
						 
						  <center> <h5>Web VAPT </h5></center>
						<p class="p-1 text-justify" style="word-spacing: 6px;"> 
					       <center><img src="assets/images/web.png" alt="" class="logo"></center>
						 </p>
						  <center> <h5>Network VAPT </h5></center>
						<p class="p-1 text-justify" style="word-spacing: 6px;"> 
					       <center><img src="assets/images/network.png" alt="" class="logo"></center>
						 </p>
					    
                        <h5>1.5 TOOLS WHICH ARE COMMON USED</h5> 
						<p class="p-1 text-justify" style="word-spacing: 6px;"> 
						Here are few examples of tools that can be used during VAPT process, but don’t limit yourself because there many tools out there:
						 </p>
					    <p class="p-0 text-justify" style="word-spacing: 6px;">
					    	<ul style="word-spacing: 6px;"><li >Acunetix</li> <li >owaspm zap</li> <li >exploitdb and searchexploit</li> <li >Nessus</li> <li >OpenVas</li><li > Nikto</li> <li >wpscan</li> <li >Gobuster,ffuf,wfuzz</li> <li >burpsuite-community and Enterprise Metasploit</li> And so on</ul> 
                        </p> 
                        
                         <h5>1.6 TOP COMMON VULNERABILITY</h5> 
						<p class="p-1 text-justify" style="word-spacing: 6px;"> 
						Here are few examples of tools that can be used during VAPT process, but don’t limit yourself because there many top common vulnerability:
						 </p> 
					    <p class="p-0 text-justify" style="word-spacing: 6px;">
					    	<ul style="word-spacing: 6px;"><li >SQLi - SQL injection</li> <li >OS command injection</li> <li >exploitdb and searchexploit</li> <li >XSS - Cross site scripting</li> <li >Broken Access Control</li><li > LFI and RFI</li> <li >SSTI</li> <li >Insecure Cryptography</li> <li > SSRF- Server Side Request Forgery</li><li > File upload </li><li > Unpatched vulnerabilities</li> And so on</ul> 
                        </p> 
                        
                         <h5>1.7 DEMO</h5> 
						<p class="p-1 text-justify" style="word-spacing: 6px;"> 
					    Demo time:-
						 </p>  

					    <p class="p-0 text-justify" style="word-spacing: 6px;">
					    	<ul style="word-spacing: 6px;"><li >Ofbiz - CVE</li> <li >dvwa</li> <li >jenkins - CVE</li> <li >jenkins - CVE</li> <li >vsftp 2.3.4  - CVE</li></ul> 
                        </p> 
                    </div>
                </div>
            </div>
			</div> 
		</div>
		<!-- [ Main Content ] end -->
	</div>
</div>
 
    <script src="assets/js/vendor-all.min.js"></script>
    <script src="assets/js/plugins/bootstrap.min.js"></script>
    <script src="assets/js/pcoded.min.js"></script> 
</body>

</html>