Vulnerability Assessment Project

Test your vulnerability assessment skills as your progress through seven challenges leveraging free-to-use security tools and services. First you'll set up your environment using JDK 11, Maven 3.6.3 and Git. Then you'll use SNYK, static application security testing with Coverity Scan and a risk assessment template to discover, identify and rate the CWEs and CVEs. Finally, you'll find the most appropriate fixes for the two vulnerabilities with the highest risk.

Get Started

Free training week — 1,400+ on-demand courses and hands-on labs

Start Learning

Get hands-on vulnerability assessment experience

Estimated project time: 1 hours, 14 minutes

Project Walkthrough
Video
Project Walkthrough

Project Walkthrough

This video walks you through the project, explaining what needs to be done in each of the challenges.

3 minutes
Project Challenges
File
Project Challenges

Project Challenges

Description of the challenges you need to complete as part of this project.

Project Prerequisites
File
Project Prerequisites

Project Prerequisites

Files and links you will need to complete this project.

Risk Assessment Template
File
Risk Assessment Template

Risk Assessment Template

The template you will need to complete this project.
Coverity Scan Demo
Video
Coverity Scan Demo

Coverity Scan Demo

Demonstration of Coverity Scan.

17 minutes
OTX Demo
Video
OTX Demo

OTX Demo

Demonstration of OTX.

5 minutes
SNYK Demo
Video
SNYK Demo

SNYK Demo

Demonstration of SNYK.

8 minutes
Project Challenges Solutions
File
Project Challenges Solutions

Project Challenges Solutions

This document contains solutions to the project challenges.

Plans & pricing

Infosec Skills Personal

$299 / year

Buy Now 7-Day Free Trial
  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

Book a Meeting
  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps