VunFisher controlled beta - complete tester walkthrough

Use 64-bit Windows 10 or 11 and an email address you can access.

Install Microsoft Authenticator or another time-based authenticator on a phone.

For a remote Windows test, record the authorized target hostname and fixed private IPv4 address. Obtain an approved scan account and its current password.

Identify whether the target is workgroup, Active Directory domain joined or Intune managed. Ask IT before changing Group Policy, Intune or shared settings.

Do not use a domain controller, public-network profile or production-critical computer for the first test.

Open https://txvf.tinkextra.com/overview/downloads.html.

Choose Get free access. Submit your name, email, package and requested term. No card is required. The activation code is sent to the supplied email address.

Download VunFisher-Windows.zip from the official page.

Verify the complete SHA-256 value shown on that page: Get-FileHash .\VunFisher-Windows.zip -Algorithm SHA256

Extract every file into a new folder. Do not run setup inside the ZIP.

Open INSTALL.vbs and choose Install VunFisher. Do not bypass organizational policy if unsigned scripts are blocked; ask IT to approve the package.

Open the TX VunFisher Desktop shortcut. The browser should open the local app at http://127.0.0.1:8787.

Create the local scanner administrator account. This account stays on this Windows computer. It is different from a hosted txvf.tinkextra.com account. Use a password of at least 6 characters that is not a common or easily guessed password.

Enter the activation code from the approval email. An unused code must be redeemed within 30 days and binds to one installation. Keep it private.

Open account security and set up MFA. Scan the QR code with Microsoft Authenticator, enter the displayed six-digit setup code and save the recovery codes privately.

After setup succeeds, wait for the authenticator to display the NEXT six-digit code before signing in. The setup code is single use and cannot be reused.

Close VunFisher, reopen the Desktop shortcut and sign in again. Confirm the account, active license, MFA and settings persist before scanning.

Local assessment: use the installed app to assess the scanner itself. A remote credential profile is not required.

Credentialed remote Windows assessment: continue with Parts 4 through 6. The scanner and target must be able to reach each other over the approved private LAN or VPN path.

In the local VunFisher app, open Platform > License and download the licensed Target Setup Assistant 0.3.0.

Copy and run the assistant on the TARGET. Enter the SCANNER'S fixed private IPv4 address. Enter the existing scan account identity as DOMAIN\scanuser or TARGETCOMPUTER\scanuser. Do not enter any password in the assistant.

Select Audit this target. Review the numbered Credential scan setup plan.

Resolve every STOP item before continuing. Public networks, domain controllers and centrally managed settings require the appropriate IT, Group Policy or Intune path. Do not override those controls locally.

Use Preview changes before Apply approved plan. Apply only after authorization and only when the assistant has created a checkpoint. The Apply action can restart or configure WinRM and interrupt remote-management sessions.

Confirm the target is on a trusted private network, WinRM is available, the approved account has the required rights, and firewall scope permits only the scanner's approved address. The detailed route is in the Remote Scan Setup Guide linked from the download page.

Return to the local app at http://127.0.0.1:8787 and open Assessment > Credentials.

Step 1, Create Credential Profile:

Step 2, Add Windows Password: select the profile and enter the target account's actual password. Do not enter the VunFisher password or a Windows PIN.

Step 3, Test Connection: enter the exact target IPv4 address, select the profile, confirm authorization and run Test Credential.

Continue to a full inventory only when Authentication is SUCCESS and the target identity is correct. Full Windows inventory normally requires Privilege ADMINISTRATOR and Evidence SUCCESS. STANDARD or PARTIAL results mean coverage is incomplete and must be investigated.

Open Scans > New Scan and choose Credentialed Windows Assessment.

Enter only the authorized target, select the validated credential profile, read the scope statement, confirm authorization and start the scan.

Watch the scan monitor. Keep the target awake and connected. Cancel the job if the target or authorization changes.

When complete, verify Scan status, Connectivity, Authentication, Identity, Privilege, Evidence and plugin coverage. A completed job with failed or blocked checks is not complete coverage. Zero findings does not prove the target secure.

Review each finding's observation, evidence, match rationale, confidence, severity, TXVF Plugin ID/version and remediation guidance.

Record an owner and action. Use remediation, POA&M, accepted risk or another supported disposition as appropriate. Retest changed systems and compare the new evidence with the original assessment.

Export a report and confirm that a security, IT or audit reviewer can understand the scope, authentication result, coverage, evidence, action and retest result.

If your test includes the Windows agent uploader, register the scanner through the hosted portal and upload only approved completed finding summaries. The uploader is not a remote command channel.

Submit feedback at https://txvf.tinkextra.com/overview/beta-feedback.html. Include Windows edition, VunFisher build, assessment ID, exact steps, expected result, actual result and the displayed error. Remove passwords, activation codes, MFA seeds, recovery codes, credentials, private keys, customer data and unredacted scan evidence from screenshots and attachments.