Ininitialexperimentsperformed on 2571 services across 7 local academic intuitions, 12967 known-vulnerabilities were identified. Through the novel approach of Scout the problems currently associated with the alternative active approach are mitigated. These tools can contribute to traffic for sustained periods of time, causing disruption to the target network. Current vulnerability assessment tools operate actively by interrogating services with specialized probes. Implemented through Python scripts corresponding with the Censys API and a locally stored MongoDB containing the relevant NVD data feeds. This is done by the manufacturing of accurate Common Platform Enumerations (CPE) via service banner analysis of the Censys data, and associating theseto relevant Common Vulnerability and Exposures(CVE) from the NVD. This dissertation looks towards extending this functionality through the creation of a novel tool named‘Scout’.Through the utilization of the Censys Internet-wide scanner and the data feeds found within the National Vulnerability Database (NVD), Scout passively identifies known-vulnerabilities. This can be used to potentially identify systems and services which may be susceptible to known-vulnerabilities without interacting with the target devices or networks themselves.This approach can be classed ascontactless activereconnaissance.However, the vulnerability identification functionality aspect is very limited. Internet-wide scanning projects such as Shodan and Censys, scan the Internet and collect active reconnaissance results,and provide access to this information publicly through websites. In this paper, we mainly focused on explaining about network security using vulnerability assessment tool Nessus and node protection tool CyberGhost VPN. Threat detection mainly focuses on individual platforms, networks, systems, endpoints or almost any other IT resource. The fact is that more and more major security breaches are occurring where the traditional approaches to security no longer work. In this new era of security, voluminous amount of data is generated daily and the late detection of security threats can cause an irreparable damage which becomes more worrisome. Everyone wants to keep their data safe and secure and the main goals of security are confidentiality, Integrity, and availability of data. Security is to give protection to the network or system. With the evolving technologies and advances in computer security, threats and security attacks are increasing rapidly and will also increase in the future with the Internet of Things (IoT). In today's world security has been the utmost concern for any individual or an organization. The evaluation is based on an extracted list of vulnerabilities from OWASP (Open Web Application Security Project). This was achieved by classifying the analyzed tools using the most common parameters. In this research, we have evaluated the performance of web application vulnerability scanners by testing intentionally defined vulnerable applications and the level of their respective precision and accuracy. However, the findings show no well-defined method or criteria available for assessing their results. Moreover, intensive research has been carried out to quantitatively enumerate web application security scanners’ results to inspect their effectiveness and limitations.

However, these security scanners possess various weaknesses of not scanning complete web applications and generating wrong test results. A publicly available web application vulnerability scanner is a computer program that assesses web application security by employing automated penetration testing techniques that reduce the time, cost, and resources required for web application penetration testing and eliminates test engineers’ dependency on human knowledge.

It has, therefore, become necessary to find vulnerabilities in these information system resources to guarantee information security. This mammoth rise in their usage has also resulted in many security issues that make these web applications vulnerable, thereby affecting the confidentiality, integrity, and availability of associated information systems.

Businesses, industries, financial and educational institutions, and the general populace depend on web applications. The growing use of the internet has resulted in an exponential rise in the use of web applications.

How to use nessus enum kali