Practical 4:Aim: Practical on vulnerability scanning and assessment. • sudo nmap --script-updatedb • sudo nmap -sC • nmap --script=ssh-run • nmap –script=http-trace • sudo apt install nikto -y • nikto -host 45.33.32.156 -port 80 -Plugins "apacheusers(enumerate,dictionary:/full/path/to/users.txt)" -output apacheuser.xml • cat apacheuser.xml • wpscan --url https://wpdemo.net/ • sudo apt install zaproxy -y • zaproxy • in Quick start - automated scanner – url to attack : http://testphp.vulnweb.com/