authenticated-SKILL.md

Credentialed vulnerability scanning uses valid credentials to log into hosts and inspect installed software, patches, and configurations. This authenticated access reveals hidden weaknesses and verifies patch levels that unauthenticated network scans miss.

Yes, authenticated scanning supports Linux, Windows, and SNMP targets. It connects via SSH, WinRM, SMB, and SNMPv3 to perform deep local enumeration of installed packages, patches, and configurations across these environments.

Run a credentialed vulnerability assessment by configuring a credentialed scanner like Nessus API, providing a targets list and credentials JSON file, then executing the Credential Validator to pre-check access and generate a report on installed software and patches.

You need service accounts with least-privilege access and secure credential storage. The workflow requires credentials formatted for SSH, WinRM, SMB, and SNMPv3 protocols to log into hosts and inspect installed software and configurations.

Credentialed vulnerability scanning limitations include the requirement for valid credentials and a configured credentialed scanner like Nessus API. Without proper least-privilege service accounts, secure credential storage, and network access via SSH or WinRM, the deep local enumeration cannot execute.