#How to use nessus after first time install
#How to use nessus after first time update

Either make no changes and continue to start scanning, or pick some subset of plugins that you think might be interesting. By default you'll be dumped to the 'Plugins' tab screen.Press 'YES' to accept the local SSL certificate you have generated.Press 'OK' on the initial SSL dialogue that appears.Or, you can follow these quick steps to run an initial scan using Nessus: In the opening screen enter in the Nessus Login name you created (not your account name) and password, then press the 'Log in' button.Īt this point you could read in detail about configuring Nessus to be used exactly as you want here: Now as a user other than root connect to the Nessus server on your local machine using the Nessus program: You could enable Nessus to boot every time you start your machine by adding the following line to your /etc/rc.conf file:īut, I would recommend against this unless you plan on using this machine heavily as a Nessus scanner. Please see the nessus-adduser(8) man page for the rules syntaxĮnter the rules for this user, and hit ctrl-D once you are done : Him to be able to scan his own host only. Nessusd has a rules system which allows you to restrict the hosts Follow the example below to create the Nessus userid pacnog with appropriate network filtering for our local network.Īuthentication (pass/cert) : RETURN Now you'll be presented with multiple choices to fill in. This userid is separate from any system userid you may have. Now we need to create a Nessus userid that we can use when connecting to the Nessus server. Private key = /usr/local/var/CA/serverkey.pem Private key = /usr/local/var/CA/cakey.pemĬertificate = /usr/local/com/CA/servercert.pem usr/local/etc/nessus/nf updatedĬertificate = /usr/local/com/CA/cacert.pem Your server certificate was properly created. If certficate generation works you should get a screen that looks like this:Ĭongratulations. Server certificate life time in days : RETURN Note that this information will *NOT* be sent toĪnybody (everything stays local), but anyone with the ability to connect to yourNessus daemon will be able to retrieve this information.ĬA certificate life time in days : RETURN This script will now ask you the relevant information to create the SSLĬertificate of Nessus. Here are the screens and the responses you should give: You will be presented with several questions to answer. You should see an indication that over 2,000 plugins were compiled! Don't forget to type:īefore you can run the Nessus daemon you need to make a local ssl certificate. Now that the main Nessus program has compiled we still need to compile the plugins for Nessus. While it's doing this we'll take this chance to talk about what Nessus does and, possibly show it in action from your instructor's machine. The Nessus website has good documentation on setting up Nessus post installation starting here: You want a GUI with Nessus, so we instal from ports.

#How to use nessus after first time install

If you install the Nessus package you'll find that it doesn't come with a GUI. This is only necessary when running a C shell (e.g., like /bin/csh).

#How to use nessus after first time update

Note 2: If you install software, update your environment as root and the change is not immediately available try typing rehash at the root shell prompt. '#' indicates a command issued as root while '$' indicates a command issued as a normal user. Note: The '#' and '$' characters before commands represents your system prompt and is not part of the command itself. Exercises: Nessus Install and use under FreeBSD: PacNOG I Workshop