task3-vulnerability-scan

Create a README.md file with all the content in markdown format

readme_content = """

Task 3 - Nessus Vulnerability Scan Report

🎯 Objective

To perform a vulnerability assessment on the OWASP vulnerable machine using Nessus Essentials.
Target IP: 192.168.56.103

🛠 Tools Used

• Nessus Essentials
• Kali Linux (for potential exploitation)
• Web browser for Nessus GUI

🔍 Top Vulnerabilities Found

1. 🚨 Samba Badlock Vulnerability (Critical)

Description:
The version of Samba running on the target has a known vulnerability in its authentication mechanism (Badlock).
It allows attackers to perform Man-in-the-Middle (MITM) attacks and downgrade the authentication level, giving them unauthorized access to sensitive operations.

Exploit:

• Tools like Responder or Metasploit can exploit this flaw.
• Using Metasploit:

  use exploit/linux/samba/is_known_pipename
  set RHOST 192.168.56.103
  set SMBUser <username>
  set SMBPass <password>
  run

Remediation / Patch:

Upgrade Samba to version 4.2.11 / 4.3.8 / 4.4.2 or later.

Apply system and package updates regularly.

Screenshot:

2. ⚠️ Apache Tomcat Default Files (Medium) Description: Apache Tomcat is exposing default files that may give attackers insight into server configurations or test scripts.

Remediation:

Remove or restrict access to default files.

Disable example and documentation directories in production.

3. ⚠️ SMB Signing Not Required (Medium) Description: The SMB protocol does not require signing, which allows attackers to intercept or tamper with SMB communication.

Remediation:

Enforce SMB signing in your domain or system policies.

Apply Group Policy to enforce SMB signing (Microsoft network client: Digitally sign communications policy).