anchor.diff:  Go:
   
   ....
  -wget https://github.com/zaproxy/zaproxy/releases/download/2.4.2/ZAP_2.4.2_Linux.tar.gz
  -tar -xvf ZAP_2.4.2_Linux.tar.gz
  -cd ZAP_2.4.2/
  +wget https://github.com/zaproxy/zaproxy/releases/download/2.4.3/ZAP_2.4.3_Linux.tar.gz
  +tar -xvf ZAP_2.4.3_Linux.tar.gz
  +
  +cd ZAP_2.4.3/
   ./zap.sh -cmd -quickurl http://10.xx.0.15:8080/MainServlet
   ....
   
  -We run this script externally to the machine being tested, and give it the URL. It then probes the URL and the server, as a form of penetration testing. It will again generate a number of findings. Research them and figure out if there is an easy fix.
  +We run this script externally to the machine being tested, and give it the URL. It then probes the URL and the server, as a form of penetration testing. It will again generate a number of findings. Research them and figure out if there is an easy fix. Share with class on Slack.
   
   NOTE: You will get raw XML dumped to the terminal. You can cut and paste this to an HTML document on your workstation and open it with a browser for an easier view.
   
   Now, try
   
  -`./zap.sh -cmd -quickurl http://10.1.0.12:8081/artifactory`
  -
  -More errors than before... why? Discuss.
  +`./zap.sh -cmd -quickurl http://10.xx.0.12:8081/artifactory`
  +
  +More errors than before... why? Discuss. How would you fix these?
   
   == Fixing one or more vulnerabilities
   
  
positive.code: 
  10.xx.0.15:8080/MainServlet
  
  === System hardening scan
  
  Now, let's install OpenSCAP on caraxx and see what it finds.
  
  NOTE: OpenSCAP is still very Red Hat-centric. However, there is a Github project covering Ubuntu vulnerabilities that will suffice for education purposes.
  
  ....
  vagrant@cara1:~$ mkdir lab-10
  vagrant@cara1:~$ cd lab-10/
  vagrant@cara1:~/lab-10$ sudo apt-get install libopenscap8    # install OpenSCAP
  vagrant@cara1:~/lab-10$ sudo apt-get install git
  vagrant@cara1:~/lab-10$ git clone https://github.com/GovReady/ubuntu-scap.git
  vagrant@cara1:~/lab-10$ cd ubuntu-scap
  vagrant@cara1:~/lab-10$ sudo ./run_tests.sh
  ....
  
  NOTE: Normally we would not like to see git on a production server, but it's convenient for this lab.
  
negative.code: * The Change will then be confirmed as having fixed the Problem, which will then be closed out.
  
  === Testers
  If you are a lab tester, be sure to remove git, libopenscap, and
  
  `sudo apt-get remove ntp`
  `rm -rf lab-10` on both caraxx and the main server.
  
  == Tools
  The following tools were evaluated as part of developing this lab.
  
  === Lynis
  
  