Fundamentals

Vulnerable & Outdated Components

Every library, framework, and plugin your application uses is a potential attack surface. Learn how attackers exploit known CVEs in outdated dependencies and how to check for them.

Beginner20 min8 lessons1 hands-on

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Identify the software stack and versions running on a target
✓Search CVE databases and Exploit-DB for known vulnerabilities
✓Understand why outdated dependencies are critical findings
✓Use version fingerprints from Nmap and HTTP headers to find CVEs

Lessons

1Real Breach: Log4Shell — One Line That Broke the Internet
2Why Dependencies Are a Risk
3Finding and Checking Vulnerable Components
4Log4Shell — The Worst Vulnerability in a Decade
5How Organisations Get Compromised Through Dependencies
6Mini Lab — Component Fingerprinting & CVE Lookup
7Your Turn: Find the Bad DepHANDS-ON
8Tool: Nuclei — Template-Based Vulnerability Scanner

Start free →