
What Nmap and Nessus Found on My Own Network
A hands-on Nmap and Nessus vulnerability scan of a real home network, covering an outdated Node.js build, an open VNC service, and unauthenticated SMB shares.
Articles, write-ups, and musings concerning the world of cybersecurity and technology.

A hands-on Nmap and Nessus vulnerability scan of a real home network, covering an outdated Node.js build, an open VNC service, and unauthenticated SMB shares.

Once you have a target IP or domain, nmap can tell you a lot: the operating system, the services running and their versions, and which ports are open. Here's the quick version of how the OS-detection side works.

Nmap flagged a 10.0 on a Samba host. Here's a quarterly Nmap and Nessus scan routine, plus the validate, fix, and re-scan testing plan that turns raw scan results into vulnerabilities actually closed.