ComputerSecurityStudent (CSS) [Login] [Join Now]




|SECURITY TOOLS >> NESSUS >> Current Page |Views: 6323

(NESSUS: Lesson 0)

{ Register and Download Nessus Security Scanner }


Section 0: Background Information
  1. What is NESSUS?
    • Tenable Network Security provides enterprise-class solutions for continuous monitoring and visibility of vulnerabilities, configurations, user activity and system events that impact security and compliance.

    • Nessus features high-speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of your security posture.

  2. Reference Link: 
  3. Lab Notes
    • In this lab we will do the following:
      1. Download Nessus
      2. Retrieve Registration Code
      3. Install Nessus

  4. Legal Disclaimer
    • As a condition of your use of this Web site, you warrant to computersecuritystudent.com that you will not use this Web site for any purpose that is unlawful or that is prohibited by these terms, conditions, and notices.
    • In accordance with UCC § 2-316, this product is provided with "no warranties, either express or implied." The information contained is provided "as-is", with "no guarantee of merchantability."
    • In addition, this is a teaching website that does not condone malicious behavior of any kind.
    • Your are on notice, that continuing and/or using this lab outside your "own" test environment is considered malicious and is against the law.
    • © 2013 No content replication of any kind is allowed without express written permission.

 

Section 1: Login to PENTEST-WXP
  1. Start Up VMWare Player
    • Instructions:
      1. Click the Start Button
      2. Type Vmplayer in the search box
      3. Click on Vmplayer

     

  2. Edit Virtual Machine Settings
    • Instructions:
      1. Click on PENTEST-WXP
      2. Edit Virtual Machine Settings
    • Note:
      • This VM is running Windows XP.

     

  3. Set Network Adapter
    • Instructions:
      1. Click on Network Adapter
      2. Click on the radio button "Bridged: Connected directly to the physical network".

     

  4. Start Up PENTEST-WXP
    • Instructions:
      1. Click Play virtual machine
     
  5. Send Ctrl+Alt+Del
    • Instructions:
      1. Click Player
      2. Click Send Ctrl+Alt+Del

     

  6. Logging into PENTEST-WXP
    • Instructions:
      1. Username: administrator
      2. Password: Supply your password

     

  7. Open a Command Prompt
    • Instructions:
      1. Start --> All Programs --> Accessories --> Command Prompt

     

  8. Determine IP Address
    • Instructions:
      1. ipconfig
    • Note(FYI):
      • My IP Address is 192.168.1.111.  Your IP Address will probably be different.

     

Section 2: Download Firefox
  1. Start Internet Explorer
    • Note(FYI):
      • If you already have Firefox installed, then skip Section 2 and continue to Section 3.
    • Instructions:
      1. Start --> All Programs --> Internet Explorer

     

  2. Navigate to Firefox
    • Instructions:
      1. Place http://www.mozilla.org/en-US/firefox/new/ into the Address Bar
      2. Click on Firefox Free Download

     

  3. Possible Blocked Download Message
    • Instructions:
      1. Click on the banner "To help protect your security".
      2. Click on Download File...

     

  4. Start Installation
    • Instructions:
      1. Click Run

     

  5. Run this software
    • Instructions:
      1. Click Run

     

  6. Mozilla Firefox Setup
    • Instructions:
      1. Click Next

     

  7. Mozilla Firefox Setup Type
    • Instructions:
      1. Select Standard
      2. Click the Next Button

     

  8. Mozilla Firefox Setup Summary
    • Instructions:
      1. Select Firefox as default web browser
      2. Click the Install Button

     

  9. Launch Firefox now
    • Instructions:
      1. Check the "Launch Firefox now" checkbox
      2. Click the Finish Button

     

  10. Import Settings and Data
    • Instructions:
      1. Select the "Microsoft Internet Explorer" radio button
      2. Click the Next Button

     

  11. Home Page Selection
    • Instructions:
      1. Select the "Import your home page from Internet Explorer" radio button
      2. Click the Next Button

     

Section 3: Obtain Nessus Activation Code
  1. Start Up Firefox
    • Instructions:
      1. Start --> All Programs --> Firefox

     

  2. Open a Command Prompt
    • Instructions:
      1. Place the following URL into Firefox
        • http://www.tenable.com/products/nessus/nessus-homefeed
      2. Supply First Name
      3. Supply Last Name
      4. Supply Email
      5. Click on the "I Agree" Checkbox
      6. Click the Register Button

     

  3. Thank Your for Registering!
    • Note:
      • Check Your Email Inbox for your registration code.
      • You will need the registration code to complete the Nessus Scanner Installation.

 

Section 4: Download Nessus
  1. Navigate to Download Agreement
    • Instructions:
      1. Place the below URL in the address bar.
        • http://www.tenable.com/products/nessus/nessus-download-agreement
      2. Click on the Agree Button

     

  2. Select Download File
    • Instructions:
      1. Click on the Microsoft Windows Twistie
      2. Click on either the 32 bit or 64 bit version of the Nessus Scanner
      3. Click the Save File Button

     

  3. Open the Nessus msi file
    • Instructions:
      1. Right Click on the Nessus msi file
      2. Click on Open

     

  4. Open Executable File?
    • Instructions:
      1. Click the OK button.

     

  5. Open Fire - Security Warning
    • Instructions:
      1. Click the Run Button

     

  6. Tenable Nessus - InstallShield Wizard
    • Instructions:
      1. Click the Next Button

     

  7. Tenable Nessus Software License Agreement
    • Instructions:
      1. Click the radio button "I accept the terms in the license agreement"
      2. Click the Next Button.

     

  8. Install Tenable Nessus to:
    • Instructions:
      1. Click the Next Button

     

  9. Please select a setup type
    • Instructions:
      1. Click the radio button "Complete"
      2. Click the Next Button

     

  10. Ready to Install the Program
    • Instructions:
      1. Click the Install Button

     

  11. InstallShield Wizard Completed
    • Instructions:
      1. Click the Finish Button

     

  12. Welcome to Nessus!
    • Instructions:
      1. Click the here link (See Below)

     

  13. Untrusted Connection Message
    • Instructions:
      1. Click on "I Understand the Risks"
      2. Click on the Add Exception Button

     

  14. Add Security Exception
    • Instructions:
      1. Check the "Permanently store this exception" checkbox.
      2. Click on the Confirm Security Exception Button

     

  15. Getting Started
    • Instructions:
      1. Click on the Get Started Button

     

  16. Initial Account Setup
    • Instructions:
      1. Login: admin
      2. Password: Input a Password.
      3. Confirm Password: Input the same Password
      4. Click the Next Button

     

  17. Registration
    • Instructions:
      1. Provide the Activation Code
      2. Click the Next Button

     

  18. Download Plugsin
    • Instructions:
      1. Click on the Download Plugins Button
    • Instructions:
      1. The pluggin download takes between 10 and 15 minutes.
      2. Initialization takes between 15 and 25 minutes.

     

  19. Test Login Credentials
    • Instructions:
      1. Username: admin
      2. Password: Supply your password
      3. Click the Sign In To Continue Button

     

  20. Sign Out
    • Instructions:
      1. Click the Sign Out Button

     

Section 5:  Create Nessus Desktop Icon
  1. Create Nessus Decktop Icon
    • Instructions:
      1. All Programs --> Tenable Network Security --> Nessus --> Nessus Web Click (Right Click)
      2. Send To --> Desktop (create shortcut)

     

  2. Nessus Web Client
    • Note(FYI):
      • On your desktop you should see an icon called "Nessus Web Client" (See Below)

 

Section 6:  Proof of Lab
  1. Start the Nessus Web Client
    • Instructions:
      1. Click on the Nessus Web Client located on the desktop
  1. Open a Command Prompt
    • Instructions:
      1. Start --> All Programs --> Accessories --> Command Prompt

     

  2. Proof of Lab Instructions
    • Instructions:
      1. netstat -nao | findstr 8834
      2. date /t
      3. echo "Your Name"
        • Replace the string "Your Name" with your actual name.
        • e.g., echo "John Gray"
      4. Do a PrtScn
      5. Paste into a word document
      6. Upload to Moodle


Help ComputerSecurityStudent
pay for continued research,
resources & bandwidth