Network
Vulnerability Research Workflow
reference
- Recon
- Enumerate
- Foothold
- PrivEsc
- Lateral
- Post-Ex
reached from External access only
Step 1: Identify exact version from enumeration
Example: "Apache 2.4.49"
Step 2: searchsploit
searchsploit apache 2.4.49
searchsploit -x 50383 # Read the exploit code directly
searchsploit -m 50383 # Copy exploit to current directory
Step 3: Google dork
site:exploit-db.com "apache 2.4.49"
site:exploit-db.com "vsftpd 2.3.4"
"service version" github poc
CVE-XXXX-XXXXX proof of concept
Step 4: Check NVD for CVE details
Step 5: GitHub for PoC
Step 6: Check HackTricks for the service