Penetration test (7) -- vulnerability scanning tool Nessus

Nessus   Official website ：https://www.tenable.com/products/nessus/nessus-professional

download nusses：https://www.tenable.com/downloads/nessus?loginAttempted=true

1、Nessus brief introduction 、 download 、 install

Jane Medium

Nessus It is a very popular vulnerability scanner in the world , Many organizations around the world are using it . The tool provides a complete computer vulnerability scanning service , And update its vulnerability database at any time .Nessus Different from traditional vulnerability scanning software ,Nessus It can be remotely controlled on the local or remote terminal at the same time , Carry out vulnerability analysis scanning of the system

Nessus Pro10.1.2 coordination 20220328 The latest version of plug-ins ：https://www.iculture.cc/software/pig=12467

download 、 install

Linux install ：

install ：dpkg -i Nessus.deb 
start-up ：systemctl start nessusd.service
Browser access ：https://127.0.0.1:8834

Windows install ：

download Nessus After decompression, install it directly , Browser access ：https://127.0.0.1:8834

download Nessus pro Plug in and update

Linux Carry out orders ：sudo /opt/nessus/sbin/nessuscli update all-2.0.tar.gz

Windows Carry out orders ：

restart Nessus service

/bin/systemctl start nessusd.service

Conduct   The plug-in configuration

Linux：sudo vi /opt/nessus/var/nessus/plugin_feed_info.inc

Windows：

Add content ：

PLUGIN_SET = "202203282143";
PLUGIN_FEED = "ProfessionalFeed (Direct)";
PLUGIN_FEED_TRANSPORT = "Tenable Network Security Lightning";

close  Nessus  service ., Restart again  Nessus  service .

Then visit again ： https://127.0.0.1:8834

kali install nessus

：https://zhuanlan.zhihu.com/p/338454648

Download the corresponding version of nusses：https://www.tenable.com/downloads/nessus?loginAttempted=true
Enter download directory ：sodu dpkg -i Nessus-10.1.1-debian6_amd64.deb

Follow the prompts to start the service first /bin/systemctl start nessusd.service

# from deb Installation package installation Nessus
sudo dpkg -i Nessus-8.10.0-debian6_amd64.deb  

# start-up nessus
sudo /etc/init.d/nessusd start

# visit nessu web ui , Set the account and password through the following ways
http://localhost:8834
Managed Scanner ---> Tenable.sc ---> [root:root]

# Upgrade plug-in package
sudo /opt/nessus/sbin/nessuscli update all-2.0.tar.gz

# Extract files
sudo tar -zxvf all-2.0.tar.gz plugin_feed_info.inc
sudo vim plugin_feed_info.inc 
cat plugin_feed_info.inc 
PLUGIN_SET = "202004162028";
PLUGIN_FEED = "ProfessionalFeed (Direct)";
PLUGIN_FEED_TRANSPORT = "Tenable Network Security Lightning";

# Moving files
sudo cp plugin_feed_info.inc /opt/nessus/var/nessus/
sudo cp plugin_feed_info.inc /opt/nessus/lib/nessus/plugins/

# restart nessus
sudo /etc/init.d/nessusd stop  
sudo /etc/init.d/nessusd start