03. Vulnerability Audit & Scanning Methodology

Vulnerability auditing involves identifying missing security patches, misconfigurations, and weak authentication mechanisms.

---

1. Automated Vulnerability Scanning with Nuclei

Nuclei uses YAML templates to scan web targets for known CVEs and security misconfigurations.

# Scan target domain using community security templates
nuclei -u https://api.techcorp.com -t cves/ -t misconfiguration/ -o nuclei_results.txt

---

2. Safe Verification Workflows

When verifying a potential vulnerability (e.g., SQL Injection or BOLA), auditors should use benign proof-of-concept payloads:

• SQLi Verification: Use AND 1=1 vs AND 1=2 or version() queries rather than destructive DROP TABLE statements.
• BOLA Verification: Query test user account resources rather than production administrative data.

---

Next Chapter: 04. CVSS v4.0 & Risk Scoring →