CompTIA · CySA+ CS0-004
Vulnerability assessment tools
CySA+ CS0-004 · Lesson 13 of 22 · 1:51:09
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the CySA+ CS0-004 exam (CompTIA Cybersecurity Analyst (CySA+)). In this lesson: Angry IP Scanner, Masscan, and Nmap, Metasploit, Maltego, and Recon-ng, Burp Suite, ZAP, and Nikto, Nessus, OpenVAS, and Nuclei, ScoutSuite, Prowler, Trivy, and Checkov, and breach and attack simulation with Atomic Red Team and Caldera. Includes three original practice questions.
Preview the topics
- A penetration tester needs to intercept the mobile app’s requests to the API, change a parameter, and send them again, to test access control. Which tool fits best?
- Before deployment, a developer wants to find misconfigurations, like a storage bucket open to the public, in the Terraform files stored in the repository. Which tool fits?
- The SOC wants to know whether its EDR and SIEM detect credential dumping and persistence by scheduled tasks, by running small, safe tests mapped to ATT&CK techniques on a lab host. Which tool fits?