0X01 environment:
kali 2019.4 64 bit
0X02 Download:
. 1 Nessus 8.9 . . 1 Debian installation package 2 links: HTTPS: // pan.baidu.com/s/1v0o-91wqClZ2acH1FDREEg . 3 extraction code: efeg . 4 . 5 widget package: 6 Links: HTTPS: // pan.baidu.com/s / 1nCiHZxCfrQxsKQYR3GKTnQ . 7 extraction code: 2pmb
0X03 installation:
1 dpkg -i Nessus- 8.8 . 0 - debian6_amd64.deb installation 2 Service nessusd Start to start the service 3 browser to access HTTPS: // localhost: 8834, initialize the scanner. Select Managed Scanner -> Managed by Tenable.sc, and then create the account password.
0X04 update plugins:
1 /opt/nessus/sbin/nessuscli update all-2.0.tar.gz
0X05 scans the page:
After installing has not scans the page, the need to modify the plugin_feed_info.inc file.
before fixing:
Modified:
The first file beginning does not exist, we need to be created manually. So before the amendment plugin_feed_info.inc, you can not find a file when the first file to find the time to panic, according to the following steps on the line.
1 export PLUGIN_SET="201912022000" 2 cat>/opt/nessus/lib/nessus/plugins/plugin_feed_info.inc<<EOF 3 PLUGIN_SET = ${PLUGIN_SET}; 4 PLUGIN_FEED = "ProfessionalFeed (Direct)"; 5 PLUGIN_FEED_TRANSPORT = "Tenable Network Security Lightning"; 6 EOF 7 8 cat>/opt/nessus/var/nessus/plugin_feed_info.inc<<EOF 9 PLUGIN_SET = ${PLUGIN_SET}; 10 PLUGIN_FEED = "ProfessionalFeed (Direct) " ; . 11 PLUGIN_FEED_TRANSPORT = " Tenable the Network Security Lightning " ; 12 is the EOF 13 is 14 15 PLUGIN_SET values used in this plug-in installation package name " All-2.0- " string of numbers behind,
nessus service nessusd restart to restart the service. When to visit again reloaded, quite a long time.
0X06 plug-in download:
The first box fill in your own generated on kali challenge code, the second box fill in the official activation code sent to you by mail.
Red box part is to get the plug-in package is the download address.
0X07 Automatic Updates:
1 #!/bin/bash 2 3 rm ~/all-2.0.tar.gz 2&>/dev/null 4 proxychains wget -O "all-2.0.tar.gz" "https://plugins.nessus.org/v2/nessus.php?f=all-2.0.tar.gz&u=c3e5df983862a71a965db6175bf1bbab&p=93c35db055397e3209aeec74073ce5a4" && (rm /opt/nessus/var/nessus/plugins-code.db* 2&>/dev/null|rm /opt/nessus/var/nessus/plugins-desc.db* 2&>/dev/null|rm /opt/nessus/var/nessus/plugins-attributes.db 2&>/dev/null|rm /opt/nessus/var/nessus/services* 2&>/dev/null|date) && /opt/nessus/sbin/nessuscli update all-2.0.tar.gz 5 6 sed -i 's/"HomeFeed (Non-commercial use only)"/"ProfessionalFeed (Direct)"/g' /opt/nessus/var/nessus/plugin_feed_info.inc 7 sed -i 's/"HomeFeed (Non-commercial use only)"/"ProfessionalFeed (Direct)"/g' /opt/nessus/lib/nessus/plugins/plugin_feed_info.inc
The above is automatically updated script, bold part of the link replaced the previous step to link their own generation. Then the usual update, execute the following script on the line. The disadvantage is that the update may be slow. If the pursuit of speed, you can configure the ladder to kali.
