skills.rest
braydos-h
braydos-hCOMMUNITY
Explore all skills by this author →
GitHub

performing-agentless-vulnerability-scanning

Scan Linux, Windows, and cloud VMs for vulnerabilities via SSH, WinRM, and EBS snapshot analysis.

4|Updated Apr 28, 2026
Search Tags:#vulnerability assessment#ssh#cve#winrm#agentless scanning#aws inspector#ebs snapshot
One-click install
npx skills add https://github.com/braydos-h/BreachPilot --skill performing-agentless-vulnerability-scanning-braydos-h
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-agentless-vulnerability-scanning
Source: https://github.com/braydos-h/BreachPilot/tree/main/skills/performing-agentless-vulnerability-scanning
Command: npx skills add https://github.com/braydos-h/BreachPilot --skill performing-agentless-vulnerability-scanning-braydos-h

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires boto3, paramiko, pandas, pywinrm, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve? Assessing systems for vulnerabilities without installing endpoint agents is difficult across mixed environments. This Skill configures and executes agentless vulnerability scanning using existing network protocols and cloud APIs, so you can enumerate packages, hotfixes, and CVEs on Linux, Windows, and cloud VMs without deploying software to targets. ## Core Features & Use Cases - SSH-Based Linux Scanning: Connect with key-based auth via paramiko to enumerate dpkg/rpm packages, kernel versions, and listening services. - WinRM-Based Windows Scanning: Query installed hotfixes, software, and OS details remotely through PowerShell over WinRM. - Cloud Snapshot Analysis: Create AWS EBS snapshots of EC2 volumes, analyze them offline, and clean up automatically; includes AWS Inspector2 coverage and findings reporting. - Use Case: A security engineer needs to assess 50 EC2 instances and on-prem Linux servers before a compliance audit. Run the included scripts to collect package inventories and Inspector2 findings, then generate a severity-summarized JSON report. ## Quick Start Run the agentless scanning agent against my AWS account in us-east-1 and generate a report of critical and high severity findings.

Frequently Asked Questions about performing-agentless-vulnerability-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Linux servers for vulnerabilities without installing an agent?▼

Use SSH-based agentless scanning with key-based authentication to enumerate installed packages via dpkg or rpm, check kernel versions, and list listening services. The included process.py script scans hosts from a file and outputs JSON results.

How does AWS agentless vulnerability scanning work with EBS snapshots?▼

AWS Inspector2 agentless scanning creates EBS snapshots of instance volumes, mounts them in an isolated service environment, and scans the file system for vulnerable packages. Snapshots are deleted after analysis, and no agent is required on target instances.

What is the difference between agentless and agent-based vulnerability scanning?▼

Agentless scanning uses existing protocols like SSH, WinRM, and cloud APIs with no software installation, making it ideal for cloud VMs, IoT, and legacy systems. Agent-based scanning provides deeper local access and works offline but requires deploying an agent to every endpoint.

Can I scan Windows machines remotely without an agent?▼

Yes, use WinRM on ports 5985/5986 with NTLM or Kerberos authentication to run PowerShell commands remotely. You can enumerate installed hotfixes, registry-based software inventory, and OS details without installing anything on the target.

Why does my agentless SSH scan fail on some hosts?▼

Common causes include missing firewall rules for port 22, SSH host key changes, incorrect credentials, or unsupported key types. Run a pre-scan credential validation that tests connectivity and authentication before the full scan.

What are the limitations of agentless vulnerability scanning?▼

Agentless scanning requires network connectivity and valid credentials, provides shallower coverage than local agents, and still consumes network and CPU resources. It may also be unsafe for OT/ICS devices that cannot handle scanning protocols.

Related Skills

Explore More Software Engineering Skills→
starwreckntxstarwreckntx

DiscoveryAgent

Discover network assets and maintain service inventory across environments.

Community
Basic
subimagesecsubimagesec

investigate-cve

Summarize a CVE's severity, exploit status, affected resources, and remediation options.

Official
Advanced
xalgordxalgord
954

deploying-osquery-for-endpoint-monitoring

Deploys and configures osquery agents for SQL-based endpoint monitoring and threat hunting.

Community
Intermediate
xalgordxalgord
954

performing-authenticated-vulnerability-scan

Perform credentialed vulnerability scans using Nessus, Qualys, or OpenVAS with SSH, WinRM, and SNMP credentials.

Community
Intermediate