What VA Is

Vulnerability assessment finds and prioritizes weaknesses on assets YOU own — scan literacy, not stranger exploitation.

15 min+40 XP3 quiz

Module progress1 of 5

Visual · va_what_is

VA = discover, identify, prioritize on owned assets. $LAB_HOST only. Original Cyberlium.

Opening

VA is not a license to nmap the dorm. It is disciplined inventory on hosts you operate.

Vulnerability assessment (VA) systematically discovers assets, identifies misconfigurations and known flaws, and prioritizes remediation for defenders. VA analysts use scanners, CVE databases, and scope documents — they do not drop exploit PoCs on production strangers. The output is risk visibility and fix lists, not trophy shells. Cyberlium Topic 18 teaches VA literacy on YOUR intentional lab VM — placeholder $LAB_HOST. You will NOT scan a classmate's laptop, sweep café Wi-Fi, or 'assess' internet ranges because a tutorial did. You will NOT treat Metasploit modules against strangers as homework. Next: RoE Written Scope.

1. Discover, identify, prioritize — defender workflow

Discovery inventories what exists on scope. Identification maps findings to CVEs, misconfigs, and policy gaps. Prioritization ranks by exposure, asset value, and exploitability — using CVSS and context, not hype.

VA analysts produce evidence for patch windows and compensating controls. Attackers hope you skip scope and scan everything reachable — you won't on $LAB_HOST.

Command guide

Try these commands — Discover, identify, prioritize — defender workflow

═══ LINUX / KALI (Penetration Testing & Service Audit) ═══

Port scan and service banner grabbing against authorized target

Command — copy this

nmap -sV -sC -Pn -T4 -p 21,22,80,443,445,3389 ${LAB_HOST:-127.0.0.1}

Enumerate web directories and hidden endpoints

Command — copy this

gobuster dir -u http://${LAB_HOST:-127.0.0.1} -w /usr/share/wordlists/dirb/common.txt -q -t 20 2>/dev/null || head -5 /etc/hosts

Metasploit framework module inspection (Safe lab syntax)

Command — copy this

msfconsole -q -x "use auxiliary/scanner/portscan/tcp; set RHOSTS 127.0.0.1; set PORTS 80,443; run; exit" 2>/dev/null || echo "Run in Kali msfconsole"

═══ WINDOWS (Audit Target) ═══ Enumerate open listening ports with process mappings

Command — copy this

netstat -ano | findstr /i "LISTENING"

Primary tools to practice this lesson: curl, jq. Reference sites: NIST NVD (https://nvd.nist.gov); MITRE CVE (https://cve.mitre.org); CISA KEV (https://www.cisa.gov/known-exploited-vulnerabilities-catalog). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. VA is analyst work on owned assets

Legitimate VA requires assets you administer: your lab VM, your personal test server, hosts named in a signed scope. Curiosity about a neighbor's open port is not assessment. A YouTube title saying 'scan any network' is not authorization.

Cyberlium labs assume a disposable lab VM you can revert at $LAB_HOST. If the target is not in your RoE file, scanner credentials stay closed.

3. What this topic will never call practice

nmap sweeps on dorm /24, Nessus against café gateways, OpenVAS on employer production without ticket, or sharing scan exports that expose classmate IPs. Those harm strangers and violate law or policy — not homework.

Ship a sentence: VA literacy here means scan and inventory on MY $LAB_HOST under written RoE. Next lesson writes that RoE.

4. What you ship: VA definition that excludes stranger scans

Write VA = discover/identify/prioritize on owned assets. Lab dest = $LAB_HOST you control. NEVER stranger LANs, café Wi-Fi, internet ranges. Notes chmod 600.

5. What you record before the next lesson

Date (UTC). VA vs offensive misuse. Lab = $LAB_HOST you own. NEVER stranger hosts, café Wi-Fi, classmate IPs. Path: $HOME/cyberlium-lab/t18-m01-l01-what-va.txt chmod 600.

6. Wrong vs right: stranger nets vs YOUR lab assets

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong
nmap the dorm subnet 'to learn VA.' Run Nessus on a café router admin page. Export classmate scan results to Discord.
Right
Define VA workflow and owned assets. Name $LAB_HOST as the only dest. Next: RoE Written Scope.

Mission: define VA as work you own

1) Write discover/identify/prioritize in one paragraph. 2) Write a NEVER list (stranger LANs, café Wi-Fi, internet ranges). 3) Name $LAB_HOST as your lab placeholder. Never scan hosts you do not administer.

Stuck? Ask Cyberlium AI Mentor

Ask Mentor: 'Hint only: what is scope?' — not how to nmap a dorm /24.

Knowledge Check

APPLY: Vulnerability assessment on Cyberlium means:

Multiple choice

Knowledge Check

APPLY: True or False: Curiosity about a neighbor's open port authorizes a VA scan.

True or False

Knowledge Check

APPLY: A VA analyst prioritizes findings mainly to:

Multiple choice

Answer all 3 knowledge checks to continue. (0/3 answered)

Guest mode — log in to track XP