Vulnerability › Module 1 › Lesson 1
What VA Is
Vulnerability assessment finds and prioritizes weaknesses on assets YOU own — scan literacy, not stranger exploitation.
Visual · va_what_is
VA = discover, identify, prioritize on owned assets. $LAB_HOST only. Original Cyberlium.
Opening
VA is not a license to nmap the dorm. It is disciplined inventory on hosts you operate.
Vulnerability assessment (VA) systematically discovers assets, identifies misconfigurations and known flaws, and prioritizes remediation for defenders. VA analysts use scanners, CVE databases, and scope documents — they do not drop exploit PoCs on production strangers. The output is risk visibility and fix lists, not trophy shells. Cyberlium Topic 18 teaches VA literacy on YOUR intentional lab VM — placeholder $LAB_HOST. You will NOT scan a classmate's laptop, sweep café Wi-Fi, or 'assess' internet ranges because a tutorial did. You will NOT treat Metasploit modules against strangers as homework. Next: RoE Written Scope.
1. Discover, identify, prioritize — defender workflow
Discovery inventories what exists on scope. Identification maps findings to CVEs, misconfigs, and policy gaps. Prioritization ranks by exposure, asset value, and exploitability — using CVSS and context, not hype.
VA analysts produce evidence for patch windows and compensating controls. Attackers hope you skip scope and scan everything reachable — you won't on $LAB_HOST.
Command guide
Try these commands — Discover, identify, prioritize — defender workflow
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
NIST NVD — https://nvd.nist.gov (national vulnerability database) MITRE CVE — https://cve.mitre.org (CVE ID naming) CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl sudo apt install jq
macOS:
Command — copy this
brew install jq
Windows: Built-in (PowerShell: Invoke-WebRequest)
Command — copy this
choco install jq
═══ LINUX / macOS ═══
Command — copy this
curl -sS https://nvd.nist.gov/ | head -8 curl -sS 'https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-44228' | jq '.vulnerabilities[0].cve.id'
Primary tools to practice this lesson: curl, jq. Reference sites: NIST NVD (https://nvd.nist.gov); MITRE CVE (https://cve.mitre.org); CISA KEV (https://www.cisa.gov/known-exploited-vulnerabilities-catalog). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. VA is analyst work on owned assets
Legitimate VA requires assets you administer: your lab VM, your personal test server, hosts named in a signed scope. Curiosity about a neighbor's open port is not assessment. A YouTube title saying 'scan any network' is not authorization.
Cyberlium labs assume a disposable lab VM you can revert at $LAB_HOST. If the target is not in your RoE file, scanner credentials stay closed.
3. What this topic will never call practice
nmap sweeps on dorm /24, Nessus against café gateways, OpenVAS on employer production without ticket, or sharing scan exports that expose classmate IPs. Those harm strangers and violate law or policy — not homework.
Ship a sentence: VA literacy here means scan and inventory on MY $LAB_HOST under written RoE. Next lesson writes that RoE.
4. What you ship: VA definition that excludes stranger scans
Write VA = discover/identify/prioritize on owned assets. Lab dest = $LAB_HOST you control. NEVER stranger LANs, café Wi-Fi, internet ranges. Notes chmod 600.
5. What you record before the next lesson
Date (UTC). VA vs offensive misuse. Lab = $LAB_HOST you own. NEVER stranger hosts, café Wi-Fi, classmate IPs. Path: $HOME/cyberlium-lab/t18-m01-l01-what-va.txt chmod 600.
6. Wrong vs right: stranger nets vs YOUR lab assets
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
nmap the dorm subnet 'to learn VA.' Run Nessus on a café router admin page. Export classmate scan results to Discord.
Right
Define VA workflow and owned assets. Name $LAB_HOST as the only dest. Next: RoE Written Scope.
Mission: define VA as work you own
1) Write discover/identify/prioritize in one paragraph. 2) Write a NEVER list (stranger LANs, café Wi-Fi, internet ranges). 3) Name $LAB_HOST as your lab placeholder. Never scan hosts you do not administer.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: 'Hint only: what is scope?' — not how to nmap a dorm /24.
Knowledge Check
APPLY: Vulnerability assessment on Cyberlium means:
Multiple choice
Knowledge Check
APPLY: True or False: Curiosity about a neighbor's open port authorizes a VA scan.
True or False
Knowledge Check
APPLY: A VA analyst prioritizes findings mainly to:
Multiple choice