Installing and Using Nessus 4.2.2: The Basics Part 1

[JellyBelly]

Installing and Running Nessus 4.2.2: The Basics

Nessus is now no longer using the Nessus Client as in previous versions.
It uses a Web Interface to set up, scan and view reports.

To download the Nessus package:
Tenable Network Security

Choose Linux. > Accept the agreement. > Choose the version that is for your distribution.

You'll want to choose "Nessus-4.2.2-ubuntu810_i386" if your using Backtrack


To install:

root@bt~# dpkg --install Nessus-4.2.2-ubuntu810_i386.deb

Now you will need to add a user to use Nessus:

root@bt~# /opt/nessus/sbin/nessus-adduser

You are going to enter a login name and then a password for logging in to Nessus:

Login: (type what you want for a name)
Authentication <enter>
Login Password: (Create a Password)
Login Password: (Repeat)
Do you want this Nessus user to be an "admin" user? yes <Enter>
(Leave the rules blank) <Enter>
This user will have "admin" privileges on the Nessus server
Is this O.K.? Yes <Enter>
user added

You will now have to register to get the plugin feed:
Tenable Network Security

Accept the agreement. > Enter an E-mail address to recieve a key.
In the E-mail sent to you will be a path with the key added to it, copy that and paste in console.

root@bt~# /opt/nessus/bin/nessus-fetch --register <your key# here>

To start the Nessus server:

root@bt~# /etc/init.d/nessusd start

To stop the Nessus server:

root@bt~# /etc/init.d/nessusd stop

Now, isn't that simple?

The Web Interface.

Remember, there is no longer a Nessus Client.

Open your favorite browser and type in the address bar:

https://127.0.0.1:8834

(don't forget the "s" in https)
Note: If using Firefox with Noscript, make sure you allow the address to view the Nessus Web Interface.

You will now be shown the login access page.



Once you have entered your user name and password you will be taken to the Nessus web interface.
The default view is Reports.

Before scanning you must configure a few things:
Click Policies > + Add



Policies
1. Enter a Name.
2. In Port Scanners check all that apply.
3. In Port Scan Options you can leave it at default or choose a range for faster scanning.
4. Click Next



Credentials
1. Click Next

JellyBelly