Nessus 4.4.1 in Backtrack 5 R1

1. Download a copy of debian Nessus from http://www.tenable.com/products/nessus/select-your-operating-system.

2. Downloaded my Nessus 4.4.1.

3. Install in command line – dpkg –i Nessus-4.4.1-debian5_i386.deb.

4. Next, register your Nessus via http://www.tenable.com/register.

5. Retrieve the activation code in your registered email.

6. Enter the key in Nessus. /opt/nessus/bin/nessus-fetch –register xxxx-xxxx-xxxx-xxxx-xxxx.

7. Add user in Nessus. /opt/nessus/sbin/nessus-adduser.

8. Start the service. nessusd start.

9. Access the GUI. https://localhost:8834/. Key in your username and password.

10. I need an interesting host, isn’t it? Download Bad Store from www.badstore.net.

11. Scanning Bad Store. Almost done.

12. Report from the scan.

13. Drilling down to port 3306 (mysql).

14. Drilling down to zero-length vulnerability.

15. Other high http findings.

16. Other high https findings.

Advertisement

Posted on 27 August, 2011, in Security. Bookmark the permalink. Leave a Comment.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.