As cited
Copy frozen at (site build).
vulnerabilities
Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it
Credentialed pre-port discovery allows scan engines to query hosts directly for open ports using existing credentials, rather than probing ports externally. This approach bypasses network inference limitations such as timeouts and rate limiting, delivering authoritative port lists from the host operating system. The trade-off is that unreachable ports reported by the host will time out during service fingerprinting, potentially lengthening scans on segmented networks.
Why it matters: Security practitioners managing authenticated scans can improve port discovery accuracy and speed on hardened or rate-limited hosts by enabling this feature per-template in version 8.58 and later, but should test on representative assets first and avoid it on deliberately segmented networks with restrictive firewall rules.
- Source published
- First seen by Cybersecurity Tracker