Luner : um mecanismo para detecção de vulnerabilidade em serviços de rede

Abstract

This paper aims to present the application Luner, a web system that identifies vulnerabilities in systems. Considering the hacker attacks that have emerged during the pandemic period and an still unsettled scenario of information security in Brazil, it is possible to perceive a new notion of the role of data protection in companies. These security incidents compromise the availability, integrity, and confidentiality of applications and, consequently, result in financial losses for the companies. Thus,this article proposes a pentest framework through an application that identifies vulnerabilities using Network Mapper (NMAP), integrates an exploitation component with Metasploit, and generates reports on the vulnerabilities found. The Luner application aims to inform about the vulnerabilities found based on the Nmap database. The pentest process will also be documented step by step, and users will be divided into two groups: the attack team and the defense team, with communication between these two teams so that the client can correct the vulnerabilities found, mitigating risks and protecting the tested system.