Kali安装nessus

谁借莪１个温暖的怀抱￠ 2021-12-21 21:59 381阅读 0赞

## 下载 ##

在官方网站下载对应的 Nessus 版本：[http://www.tenable.com/products/nessus/select-your-operating-system][http_www.tenable.com_products_nessus_select-your-operating-system]

这里选择 Kali 对应的版本，因为kali安装时选择的debian，这里就选择debian

根据系统选择

![1208477-20190111093552656-898517439.png][]

我的要选择这个

![1208477-20190111094347410-2022779226.png][]

下载完成，双击进去发现是一些tar文件

![1208477-20190111093759142-1991152124.png][]![1208477-20190111093900066-457252169.png][]

## 安装 Nessus ##

下载得到的是 deb 文件，

在所在目录右击open in terminal

执行

> dpkg \-i Nessus\-7.1.4\-debian6\_amd64.deb

安装成功

![1208477-20190111094721211-901481345.png][]

### 可能出现问题 ###

报错，意思是和amd64位系统不匹配，要重新下载，回到第一步重新下载

![1208477-20190111094218497-724960647.png][]

## 启动 Nessus ##

安装完成后出现的这两行，第一行用来启动，第二行用来配置

![1208477-20190111094902522-24248319.png][]

启动

> /etc/init.d/nessusd start

查看nessus 启动状态

> `ps -ef | grep nessus`

## 获取激活码 ##

因为之后登陆 web 界面过程中需要输入 nessus 激活码，为了不打断中间的安装过程，我们提前获取激活码，以便稍后使用。

打开网站：[http://www.tenable.com/products/nessus/nessus-plugins/obtain-an-activation-code][http_www.tenable.com_products_nessus_nessus-plugins_obtain-an-activation-code]  
选择Free的Register

输入邮箱姓名，邮箱收到消息

![1208477-20190111095650981-1415902294.png][]

## 登陆 web 界面 ##

按照之前提示信息打开网页：[https://guet:8834/][https_guet_8834]

点击Advanced，add Exception添加信任。创建用户名及密码

![1208477-20190111095930016-841321216.png][]

输入激活码

![1208477-20190111100133943-1097245078.png][]

然后开始自动下载插件

![1208477-20190111100222863-1149421265.png][]

## 忘记密码 ##

跳转到Nessus目录  
cd /opt/nessus/sbin/  
列出所有用户  
sudo ./nessuscli lsuser  
更新密码  
sudo ./nessuscli chpasswd 要更新密码的用户名  
等到提示 【New password: 】的时候输入新密码，需要输两次

![1208477-20190613172233768-1703710164.png][]

## 使用Nessus扫描web ##

Nessus可以扫描的Web应用安全项目包括：

SQL injection

Cross-Site Scripting (XSS)

HTTP Header Injection

Directory Traversal

Remote File Inclusion

Command Execution

点击Scans -> New Scan -> 选择需要的扫描器(例如web扫描可以用最后一个web)

![1208477-20190614114037088-1831405282.png][]

输入相关扫描配置

![1208477-20190614114441938-1504449858.png][]

### cookie认证导入 ###

官网链接[https://docs.tenable.com/webapplicationscanning/Content/WebApplicationScanning/ConfigureCookieAuthentication.htm][https_docs.tenable.com_webapplicationscanning_Content_WebApplicationScanning_ConfigureCookieAuthentication.htm]

点击Credentials -> Categries下面的http -> 选择HTTP cookies import

![1208477-20190614130400175-1166624924.png][]

这里要导入Netscape cookies，可以用EditThisCookie插件，设置中选择Netscape HTTP Cookie File

![1208477-20190614130632781-1768997995.png][]

转载于:https://www.cnblogs.com/aeolian/p/10253637.html

[http_www.tenable.com_products_nessus_select-your-operating-system]: http://www.tenable.com/products/nessus/select-your-operating-system
[1208477-20190111093552656-898517439.png]: /images/20211220/663f68b86bc1451abc2d109c2036b7aa.png
[1208477-20190111094347410-2022779226.png]: /images/20211220/5db65c16b7cb409a95932b0e8fc10439.png
[1208477-20190111093759142-1991152124.png]: https://img2018.cnblogs.com/blog/1208477/201901/1208477-20190111093759142-1991152124.png
[1208477-20190111093900066-457252169.png]: /images/20211220/ff5ee58b1aef487ea837a5f9ef319d70.png
[1208477-20190111094721211-901481345.png]: /images/20211220/7e1fb5d8566d4eb58f337627a7d90980.png
[1208477-20190111094218497-724960647.png]: /images/20211220/b003570aed434189af87b96b9f66e1d3.png
[1208477-20190111094902522-24248319.png]: /images/20211220/e19083d2a3d3447aa1782d5bfe7bc773.png
[http_www.tenable.com_products_nessus_nessus-plugins_obtain-an-activation-code]: http://www.tenable.com/products/nessus/nessus-plugins/obtain-an-activation-code
[1208477-20190111095650981-1415902294.png]: /images/20211220/9d0470a847db429f995f83e44634c83f.png
[https_guet_8834]: https://guet:8834/
[1208477-20190111095930016-841321216.png]: /images/20211220/f270ee69e1a94c7e8e37d79e63836ecf.png
[1208477-20190111100133943-1097245078.png]: /images/20211220/0cc6642f35944f82a89cc2af5a91c57f.png
[1208477-20190111100222863-1149421265.png]: /images/20211220/8d305607de164d059341630dd378cf47.png
[1208477-20190613172233768-1703710164.png]: /images/20211220/0a86213c3cd747dc91bedbe96b0abc98.png
[1208477-20190614114037088-1831405282.png]: /images/20211220/5d5ab9cd941043e18a11533ff57b7ef5.png
[1208477-20190614114441938-1504449858.png]: /images/20211220/1e15f91ae92a4b0fa100a0065a359617.png
[https_docs.tenable.com_webapplicationscanning_Content_WebApplicationScanning_ConfigureCookieAuthentication.htm]: https://docs.tenable.com/webapplicationscanning/Content/WebApplicationScanning/ConfigureCookieAuthentication.htm
[1208477-20190614130400175-1166624924.png]: /images/20211220/93b71e7010844a8f93eff809bb38a5a5.png
[1208477-20190614130632781-1768997995.png]: /images/20211220/9a14032552274903ada79e0a3eeb5f24.png