Nessus下载地址:http://www.nessus.org/
1.下载rpm包进行安装
# rpm –ivh Nessus-3.2.0-es4.i386.rpm
Preparing... ########################################### [100%]
1:Nessus ########################################### [100%]
nessusd (Nessus) 3.2.0 for Linux
(C) 1998 - 2008 Tenable Network Security, Inc.
Processing the Nessus plugins...
[##################################################]
All plugins loaded
- Please run /opt/nessus/sbin/nessus-adduser to add an admin user
- Register your Nessus scanner at http://www.nessus.org/register/ to
obtain all the newest plugins
- You can start nessusd by typing /sbin/service nessusd start
2.添加nessus帐号
# /opt/nessus/sbin/nessus-adduser
Using /var/tmp as a temporary file holder
Add a new nessusd user
--------------------
Login : admin
Authentication (pass/cert) [pass]:
Login password:
Login password (again):
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that admin has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser(8) man page for the rules syntax
Enter the rules for this user, and hit ctrl-D once you are done:
(the user can have an empty rules set)
Login : admin
Password : ***********
DN :
Rules :
Is that ok ? (y/n) [y]
user added.
3.启动nessus服务
# /sbin/service nessusd start
#ps -ef |grep nessus
root 5341 1 0 01:44 ? 00:00:39 nessusd: waiting for incoming connections 服务已启动
4.安装激活码
# /opt/nessus/bin/nessus-fetch -–register <license code>
无激活码也可以使用,哪位好心人可以提供一个.
1.安装客户端程序
# rpm –ivh NessusClient-3.2.x-es4.i386.rpm
# ls -l /opt/nessus
total 32
drwxr-xr-x 2 root root 4096 Feb 26 14:18 bin
drwxr-xr-x 2 root root 4096 Feb 26 14:18 lib
drwxr-xr-x 3 root root 4096 Feb 26 14:18 plugins
drwxr-xr-x 3 root root 4096 Feb 26 14:18 var
2.启动与使用客户端程序
在linux图开界面打开一个终端,键入如下命令
#cd /opt/nessus/bin
#./NessussClient
弹出如下界面
3.连接nessus服务器
点击"Connect..."按钮,并连接到你的nessus服务器
4.创建扫描策略
在右边“Select a scan policy:”点击"+"创建一个新策略
选项卡有六项:Policy, Options, Credentials, Plugin Selection, Network, Advanced.
5.创建扫描对像
在左边"Network(s) to scan:,根据情况创建扫描对象.
点击"Scan New"开始扫描
