Vulnerability Discovery

Host vulnerability discovery bridges enumeration and exploitation. You have a list of services and versions; now match them against known vulnerabilities and check for misconfigurations.

Version-based CVE matching is the fastest path: compare service banners and fingerprints against vulnerability databases. Beyond known CVEs, look for service misconfigurations like default credentials, open management interfaces, and debug endpoints.

The subpages cover automated vulnerability scanning, manual version-to-CVE matching, and misconfiguration detection across common services.