What is the main benefit of authenticated vs unauthenticated scans?

Authenticated scans log into the system to check local packages, registry keys, and patch levels, detecting 45-60% more vulnerabilities with significantly fewer false positives.

Which scanning tools are compatible with this skill?

This skill provides implementation patterns compatible with major industry tools including Nessus, Qualys, OpenVAS, and Rapid7 InsightVM.

Does this skill include automation scripts for account setup?

Yes, it includes ready-to-use Bash scripts for Linux service accounts and PowerShell snippets for Windows/Active Directory service account configuration.

How do I verify if a scan successfully used the provided credentials?

You can verify authentication status by checking specific diagnostic results, such as Nessus Plugin 19506 (Scan Information) or Plugin 110385 (Credentialed Check).

Is it safe to provide credentials to a vulnerability scanner?

Yes, provided you follow the least-privilege principles outlined in this skill, such as using dedicated service accounts, encrypted transit, and secure vault storage.

Authenticated Vulnerability Scanning

Name: Authenticated Vulnerability Scanning
Author: micsapp

bymicsapp

0•

安全与测试

Performs deep-inspection security assessments using system credentials to identify patches, configurations, and hidden vulnerabilities.

This skill provides comprehensive guidance and technical workflows for conducting authenticated (credentialed) vulnerability scans, which offer significantly higher accuracy than traditional unauthenticated assessments. It equips security professionals with standardized procedures for creating least-privilege service accounts, configuring credentials across Linux, Windows, and network devices, and validating scan success using enterprise tools like Nessus and Qualys. By enabling deep inspection of installed software and local registry settings, this skill helps teams reduce false positives and uncover 45-60% more vulnerabilities than standard network-level scans.

主要功能

01Security best practices for credential rotation and vault integration

02Least-privilege service account setup scripts for Bash and PowerShell

03Detailed guidance on interpreting scanner-specific verification plugins

04Automated validation steps for testing SSH, WinRM, and SNMP connectivity

050 GitHub stars

06Multi-platform credential configuration for Windows, Linux, and network devices

使用场景

01Identifying missing security patches and local misconfigurations in internal infrastructure

02Conducting deep-inspection security audits for regulatory compliance

03Validating security controls during post-incident investigations or forensic reviews

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills performing-authenticated-vulnerability-scan

For use in Claude.ai and ChatGPT

主要功能

01Security best practices for credential rotation and vault integration

02Least-privilege service account setup scripts for Bash and PowerShell

03Detailed guidance on interpreting scanner-specific verification plugins

04Automated validation steps for testing SSH, WinRM, and SNMP connectivity

050 GitHub stars

06Multi-platform credential configuration for Windows, Linux, and network devices

使用场景

01Identifying missing security patches and local misconfigurations in internal infrastructure

02Conducting deep-inspection security audits for regulatory compliance

03Validating security controls during post-incident investigations or forensic reviews

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills performing-authenticated-vulnerability-scan

For use in Claude.ai and ChatGPT