第 4 章 Vulnerability Scanner

简介:

目录

4.1. Nessus
4.2. OpenVAS

4.1. Nessus

http://www.nessus.org/

[root@centos6 src]# rpm -ivh Nessus-4.4.1-es6.x86_64.rpm
Preparing...                ########################################### [100%]
   1:Nessus                 ########################################### [100%]
nessusd (Nessus) 4.4.1 [build M15078] for Linux
(C) 1998 - 2011 Tenable Network Security, Inc.

Processing the Nessus plugins...
[##################################################]

All plugins loaded
 - Please run /opt/nessus//sbin/nessus-adduser to add a user
 - Register your Nessus scanner at http://www.nessus.org/register/ to obtain
   all the newest plugins
 - You can start nessusd by typing /sbin/service nessusd start
		
[root@centos6 src]# /opt/nessus/sbin/nessus-adduser
Login : admin
Login password :
Login password (again) :
Do you want this user to be a Nessus 'admin' user ? (can upload plugins, etc...) (y/n) [n]: y
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that admin has the right to test. For instance, you may want
him to be able to scan his own host only.

Please see the nessus-adduser manual for the rules syntax

Enter the rules for this user, and enter a BLANK LINE once you are done :
(the user can have an empty rules set)



Login             : admin
Password         : ***********
This user will have 'admin' privileges within the Nessus server
Rules             :
Is that ok ? (y/n) [y]
User added
		

申请一个验证吗http://www.nessus.org/products/nessus/nessus-plugins/obtain-an-activation-code会发送到你的邮箱中。

[root@centos6 src]# /opt/nessus/bin/nessus-fetch --register 433E-3B47-94AF-5CF8-7E8E
Your activation code has been registered properly - thank you.
Now fetching the newest plugin set from plugins.nessus.org...
Your Nessus installation is now up-to-date.
If auto_update is set to 'yes' in nessusd.conf, Nessus will
update the plugins by itself.
		
[root@centos6 src]# /sbin/service nessusd start
Starting Nessus services:
[root@centos6 src]# Missing plugins. Attempting a plugin update...
Your installation is missing plugins. Please register and try again.
To register, please visit http://www.nessus.org/register/
		

https://localhost:8834




原文出处:Netkiller 系列 手札
本文作者:陈景峯
转载请与作者联系,同时请务必标明文章原始出处和作者信息及本声明。

目录
相关文章
|
搜索推荐 算法 Python
Recommended System
推荐系统 推荐系统的核心问题就在于为用户推荐与其兴趣相似度比较高的商品。比如在微博上,用户至上想打发时间,并不是想准确的查看某条信息,在首页中查看每一条微博,为了帮助他筛选出一批他们可能感兴趣的信息,此时就需要分析出该用户的兴趣,从海量信息中选择出与用户兴趣相似的信息,并将这些信息推荐给用户。
1229 0
|
Web App开发 安全 测试技术
Acunetix Web Vulnerability Scanner手册
目录: 0×00、什么是Acunetix Web Vulnarability Scanner ( What is AWVS?) 0×01、AWVS安装过程、主要文件介绍、界面简介、主要操作区域简介(Install AWVS and GUI Descri...
3030 0
|
机器学习/深度学习 安全 Linux
Voiceprint Recognition System – Not Just a Powerful Authentication Tool
Learn details about voiceprint recognition system and its underlying principles as a powerful authentication tool
3943 0
|
SQL 监控 安全
Passive Vulnerability Scanner
http://baike.baidu.com/link?url=SLi8HriCg97ZHqaE4qbxUO4YiRttOBigUMzhbjpzhw3jraXZehUOpYdXQjm-udjVIgR4jHOif-IVuaz49OhQ6drrY9gMhnYqArPOx6NFHhe7-pOSAy-9c84W0AfAkrXH 产品概述编辑 Tenable的PVS漏洞监控工具是一项网络发现和漏洞分析的专利技术,它以一种非入侵性的方式,提供持续的实时网络分析和监控。
1007 0
|
JavaScript 安全
DOM XSS Scanner - Find DOM based XSS Security Vulnerabilities
https://github.com/yaph/domxssscanner http://code.
953 0
How to Scan a Shopping Cart with an Automated Security Scanner
Many of today’s large scale websites are template based.
989 0
Multiple Products Cookie Authentication Bypass Vulnerability
http://downloads.securityfocus.com/vulnerabilities/exploits/55234.
704 0
|
安全
Cacti Multiple Input Validation Security Vulnerabilities
 http://www.securityfocus.com/bid/39639/exploit
598 0