May Nessus | Tenable Network Security BackTrack 5

May Nessus | Tenable Network Security BackTrack 5 

Nessus: For security professionals that evaluate complex business networks for security breaches and compliance issues, Nessus is vulnerability of the world's most widely deployed and evaluation of product configurations. With over five million downloads to date, Nessus features high-speed discovery, configuration auditing, asset profile, sensitive data discovery, integration of patch management, and vulnerability analysis of your position Safety.Nessus scanners can be distributed throughout the enterprise, in DMZ, and through physically separated networks. 
Nessus is supported by a team of world-renowned research and has the largest base possible knowledge vulnerability, making it suitable for more complex environments. 


Source: http://www.tenable.com/products/nessus 


Video tutorial: http://www.youtube.com/watch?v=HrKoHx7LuZM&feature=plcp 

Basic Commands (Video tutorial) 

root @ bt: ~ # apt-get install nessus 

NESSUS recorded: 

http://www.tenable.com/products/nessus/nessus-download-agreement 

root @ bt: ~ # / opt / nessus / bin / nessus-fetch - register "Registration Code" 

root @ bt: ~ # / opt / nessus / sbin / nessus-adduser 

root @ bt: ~ # msfconsole 

msf> load nessus 

msf> nessus_conect 

msf> -3 nessus_scan_new <NAME> <IP> 

msf> nessus_report_list 

msf> nessus_report_hosts <ID> 

msf> nessus_report_host_ports <IP> <ID> 

msf> <report <protocol> <port> <IP> nessus_report_host_detail id> 



Nessus commands: 

nessus_admin nessus_save 
nessus_connect nessus_scan_new 
nessus_db_scan nessus_scan_pause 
nessus_help nessus_scan_pause_all 
nessus_index nessus_scan_resume 
nessus_logout nessus_scan_resume_all 
nessus_plugin_details nessus_scan_status 
nessus_plugin_family nessus_scan_stop 
nessus_plugin_list nessus_scan_stop_all 
nessus_plugin_prefs nessus_server_feed 
nessus_policy_del nessus_server_prefs 
nessus_policy_list nessus_server_status 
nessus_report_del nessus_template_list 
nessus_report_get nessus_user_add 
nessus_report_host_detail nessus_user_del 
nessus_report_host_ports nessus_user_list 
nessus_report_hosts nessus_user_passwd 
nessus_report_list 

Come see the show just have msf enter the name of the command line example: 


msf> nessus_connect 

[*] Usage: 
[*] Nessus_connect username: password @ hostname: port <ssl ok> 
[*] Example:> nessus_connect msf: msf@192.168.1.10: 8834 ok 
[*] OR 
[*] Nessus_connect username @ hostname: port <ssl ok> 
[*] Example:> nessus_connect msf@192.168.1.10: 8834 ok 
[*] OR 
[*] Nessus_connect hostname: port <ssl ok> 
[*] Example:> 192.168.1.10:8834 nessus_connect ok 
[*] OR 
[*] Nessus_connect 
[*] Example:> nessus_connect 
[*] This only works after You have saved creds with nessus_save 
msf>