Evaluate database security by using database vulnerability scan 2 create a scan task

In the previous article, you Xia introduced the "database vulnerability scan system". Some netizens may be concerned about the ease of use of the system. In this article, you Xia will perform an Oracle database vulnerability scan with everyone.

Test environment:

• Windows Server 2003 in VMware
• Oracle 10g (Windows)
• Others: No Patches

The database vulnerability scan system supports three members by default to adapt to the database security assessment of classified protection projects and military systems.

First, you need to create a Task Group, such as different departments, different administrators, and different database types, to facilitate the management of scan tasks. The task group name here is "You Xia security net". Right-click the group and select "new task ".

You can select the automatic discovery activity manual input mode to add a database:

Here we select "automatic discovery", which is not much different. It is nothing more than entering IP, database type, port and other information. You will be prompted to select the scanned NIC (if multiple NICs exist, select the NIC that can access the database) and select the database address range:

Next, set the database type, database port, and port number to be scanned:

If there are multiple types of databases in this CIDR block, you can select multiple databases. Here, only oracle is available. We only select oracle. After the next step, the database vulnerability scanner can automatically scan the Oracle database in the CIDR Block:

The following is the scanned information. You can manually confirm whether it is correct:

After confirmation, select the database vulnerability scan policy:

Here, for the diversity of scan results, you have selected all scan policies. After the next step, enter the description of the scan task and the task is created!

In the next chapter, you and Alibaba Cloud launch scanning tasks and analyze the differences between different types of scanning tasks. Welcome to www.youxia.org!

This "database vulnerability scan" topic contains 6 articles,:

• Evaluate database security by using database vulnerability scan 1 Overview
• Evaluate database security by using database vulnerability scan 2 create a scan task
• Use Database vulnerability scan to evaluate database security 3 Authorization Scan
• Evaluate database security by using database vulnerability scan 4 weak password Scan
• Evaluate database security using database vulnerability scan 5 unauthorized scanning
• Evaluate database security with database vulnerability scan 6 penetration attacks

Author: Source of reprinted by Zhang baichuan (Web Ranger) www.youxia.org! Thank you.