Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Using an Exploit Framework for SMB Version Scanning
Vulnerabilities in SMB (Server Message Block) network services pose significant security risks, allowing attackers to gain unauthorized access or launch denial of service (DoS) attacks. This Skill Lab provides hands-on experience using a popular penetration testing tool to scan systems for vulnerable SMB server versions. Within the virtual environment, learners will work with a pre-configured exploitation framework and a vulnerable system, enabling practical training in identifying and mitigating SMB vulnerabilities. By understanding the intricacies of SMB version scanning, participants can enhance their penetration testing skills and improve network security measures.
Course Overview
Learning Objectives
After completing this lab, learners will be adept at using exploitation frameworks to identify vulnerable SMB versions, perform essential network scanning tasks, and implement measures to protect against unauthorized access and DoS attacks on SMB network services.
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Work Roles
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.