NIST Privacy Framework Guide

https://www.nist.gov/system/files/documents/2021/01/13/Getting-Started-NIST-Privacy-Framework-Guide.pdf

NIST Cybersecurity Framework Quick Start Guide

 https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1271.pdf

How to check if the remote SMTP server supports TLS 1.1

 First confirm if OpenSSL has been installed properly:

#which openssl

Then execute the command below:

#openssl s_client -starttls smtp -crlf -connect HOST:PORT -tls1_1

If the output shows TLS session ticket, the peer SMTP server supports.

Otherwise, it does not support.

Install OpenVAS at Kali Linux in November 2022

Use the root account to log into Kali Linux (version: 2022.3) before executing the commands below:

#apt-get update

#apt-get install gvm gvmd gvmd-common openvas openvas-scanner ospd-openvas greenbone-security-assistant

#gvm-setup

Record the password of the admin account showing up in the output of gvm-setup execution.

#gvm-check-setup

#apt-get install nsis

#gvm-stop

#sudo -u _gvm greenbone-nvt-sync

#gvm-start

Open a web browser to surf https://127.0.0.1:9392/ and utilize the said password of the admin account to log in.

[nmap] NMAP Vulnerability Scan

The document herein gathers some scenarios of utilizing Nmap as a vulnerability scanner:

 

Default Scenario:

Upgrade scripts:
#nmap --script-updatedb
Common Script Scan against an IP:
#nmap -sC 192.168.1.80
Vulnerability Scan:
#nmap --script vuln 10.10.10.40
Apply only those SAFE scripts to the vulnerability scan:
#nmap --script safe 10.10.10.40
Apply all scripts to scan a target:
#nmap --script all 10.10.10.40

 

Applying vuln script:

Install / Upgrade scripts:
#cd /usr/share/nmap/scripts/

#git clone https://github.com/vulnersCom/nmap-vulners.git

Vulnerability Scan:
#nmap --script=nmap-vulners/vulners.nse10.10.10.40

Applying vulscan script:

Install / Upgrade scripts:
#cd /usr/share/nmap/scripts/
#git clone https://github.com/scipag/vulscan

Vulnerability Scan:

#nmap --script=vulscan/vulscan.nse10.10.10.40 

[Phishing] Conducting deep research against the target for Phishing

Maltego 

https://www.maltego.com/maltego-community/

[Phishing] URL Shorteners for Phishing

https://tinyurl.com/

https://bitly.com/