Network CVE Hunting
Before or during a network assessment, always fetch the latest CVEs related to the target's network services (e.g., SSH, FTP, SMB, VPNs, Routers).
Objective
If only the network testing type is selected, the agent must be able to independently look up the latest vulnerabilities to ensure no newly discovered flaws are missed.
Skills & Execution
- Use
search_webor online vulnerability databases to query the latest CVEs for any identified network services and port banners. - Monitor exploit databases for recent proofs of concept (PoCs) targeting network infrastructure.
- Cross-reference discovered service versions with known vulnerabilities.