- 准备工作:
下载Nessus-5.2.7-es5.i386.rpm
http://www.tenable.com/products/nessus/select-your-operating-system
申请激活码:
http://www.tenable.com/products/nessus/nessus-plugins/obtain-an-activation-code
2.安装和注册Nessus:rpm -ivh Nessus-5.2.7-es5.i386.rpm
注册方法有两种:命令注册和浏览器访问注册,我们选择命令注册。
[[email protected] ~]# /opt/nessus/bin/nessus-fetch --register FF8F-8020-BD14-74C9-143E
Your Activation Code has been registered properly - thank you.
Now fetching the newest plugin set from plugins.nessus.org...
Your Nessus installation is now up-to-date.
If auto_update is set to ‘yes‘ in nessusd.conf, Nessus will
update the plugins by itself.
3.注册成功后启动服务:service nessusd start
4.添加用户:/opt/nessus/sbin/nessus-adduser
[[email protected] ~]# /opt/nessus/sbin/nessus-adduser
Login : admin
Login password :
Login password (again) :
Do you want this user to be a Nessus‘admin‘ user ? (can upload plugins, etc...) (y/n) [n]: y
User rules
----------
nessusd has a rules system which allows youto restrict the hosts
that admin has the right to test. Forinstance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser manual forthe rules syntax
Enter the rules for this user, and enter aBLANK LINE once you are done :
(the user can have an empty rules set)
Login : admin
Password : ***********
This user will have ‘admin‘ privilegeswithin the Nessus server
Rules :
Is that ok ? (y/n) [y] y
User added
5.更新插件,过程是相当的漫长啊:https://192.168.88.138:8834
6.策略模版配置: