A little bit even in the previous year do you have learnt about how to install Les's on the machine
on this video.
We'll see how to use Nessa's performer and Ridley Scott.
So in this video we'll have a walkthrough of this this kind and see the different types of scans available
in nesses and then we'll learn how to configure and runner.
Well it really is kind of hard choice one just kind is complete.
Go through the research to understand how to make sense out of this Gunders works.
And then we'll see what needs to be done next.
Now let's quickly move to machine as we remember in the last video was the installation is completed.
If you want to use Nessus you'll need to browse to the link as shown where your local host and port
number eight directly will and you will get this.
Nothing beats this need to enter the username password which you have configured.
Well the installation process is what's going on.
And then press.
And so once you're done with log in you'll be presented with the screen over here.
If you go into it bizarre things you get to certain states.
Menaces.
Kind of it is online.
This is the latest version available.
And it also shows me last updated on what date and so on.
So time and again you should keep updating your Nessus so that you are flagons up a bit.
And if any kind of game a new version is released just need to come yet in a big Denis's version to
the latest version.
So this is a searchings window that you can do all the things you can create more accounts if you want
to allow other people to use nisus.
But from the different local you can configure it as the piece over our proxy server.
If undercook has DAC so that nesses can also use it when performing just get an item to the server so
that it can send mails automatically to you as an administrator.
There are a few old ones or things that's going to continue.
Good morning Genesis.
So that are plugged in.
There are different configuration files that are not enabled by default but if you want to use it against
unlabelled for example part of it if it enables it not necessarily automatically update and so to just
go through this list understanding each of them and you should get more familiar with this is coming
back to the homepage you have this KUNZMANN going the policy is Bindo.
So if I go into politics and the new policy I can create a policy of this scanner complex and if I come
back to scan scan again it shows all the company actually the next thing that we can do is then you
create a scan and then it will be saved run under my skin folder or you can create a new folder to segregate
discussed that you perform on different networks.
Now talking about DVDs and tapes types available in Nessus This allows you to perform a basic Necros
can scan.
You can also perform the credential past or that that you have credentials of Unical devices.
And based on that you can home in donor device can also Nessus can help you perform that show subduction.
And what exactly it means using the best detection we can look for.
Well it does in the Linux and Mac machines but the shellshock is just going to be used to perform scans
on the machines and you can also perform the application testing by using a scanner and there are many
more complex available to perform this scan.
If you come over here and we see you have the advance scan there are a few features we did believe it
or live it once you upgrade you on SS to a professional or some other version.
So did the cloud infrastructure can also be or could using NASA's back not correction down detection
hold discovery and so on.
You can also performed on television that can using Nessus and the mobile devices can be scanned using
misses you can have configuration audits you can perform a policy compliance and so on.
And essentially we have seen the great and some of it so even that can be scanned using nisus if it
is the latest version of data.
Now let's quickly see how we can do a scan.
So for them bloopers because I've down on my modest portable version machine on which I'll run a scan
in your case you can have another machine in your network.
If you have your own network you can perform this kind of network but make sure that you don't perform
a scan on someone else's network without the prior permission and preferably the former.
It's all coming back man said click on your scan.
I have two options.
Support non-guilt just put a home basic Netflix can select this template from snorting.
Once it template loads will ask you for a name so you can get it in any name like an this table you're
going to give some description.
You can choose the four letter word you would like receive your scan.
Some just need immediately forward.
And then if you are performing a scan only for a particular machine.
The problem machine's IP address and if you are performing this can plug the computer network in good
form this can be entering the network IP.
So I will be doing it only for one machine because I'm going to work on network.
So I don't have any BMC running to enter the IP address or maybe just part of the machine reachable
to the children.
And then surely will I can enable a child if I want to run this kind of data.
But nobody would know if my piece of wire is configured then the notification to nest is gone.
You are worthless to me.
Militarists and not neutral at the moment.
Commingle discovery begins to scan they support scan for a common border or fork's.
Again your choice.
Just leave it as common at the moment in assessment.
To scan day.
Next your scan for the defogger.
Services or even to scan for verbal and routine also ends on the people being complete.
Just as you what you need in the report.
So it does allow users to understand Izzard's designate who is by their DNS name.
So if your network has many computers and you identify the machines the DNS name you can run with actually
and so on.
So once you are done with the configurations over your gun again your credentials have no this can be
used to the home credentials scanning also.
So let's say I select Windows.
So if I have early Vicary instead of the machine that I can enter the digital area and home a scan.
If not then just remove this current And just can come back to the settings of the crosschecking who
are getting it done.
And you can save this for.
So in this way you can do any skin type you want to configure and then just kind of skated up the list
to where you just need to click on launch and this scandal start running so you can see the scan is
running at the moment.
This may take some time to compute the scan depending on the network size or the machine on which you
want to let it continue.
Now as this scan is progressing if I just click on the scan it will show me what it has been identified.
So you can see over here even the roadways that are being divider shown in different colors.
So in deference to the I will replace the medium.
These are just informations that are being displayed and so on.
You not clear on this.
It could show me a list of days.
Indeed.
So my model of the machine has the ability that is very critical also.
Ok so today is kind of his computer I guess if they come back again just check it is still running.
Will that quickly do that is ERTS exodus is going to be that.
I wondered if I had on the indices of a bus.
So similarly there are many other remedies that are being derailed by this.
Now as a penetration tester you just need to cross check if this one really actually exists.
Or is it a false positive for doing so.
It is like to explode the DNC server on the machine.
Not talking more about this that is or you are.
If I click on any one that has been displayed you can see that it is about Iran.
So what is the description what exactly this when we're good at those too.
If you are an actor I I'm sure you can see how to secure this one already.
There are some details about the Unisys plugin that has been used to perform the scan and information.
And so now we have to wait for the -- to complete completely.
Because this kind is completed it will give you more options in the page.
Now this guy is going on.
Let's move on to another scan which I have ordered even Zegerid to earlier.
So if I see this scan as you are here you have all the one that is listed on you also.
Therefore damnations.
So if I go to immolations does taking the following actions across one host would result 3 percent of
the win.
So there are few things that are common for the complete machine.
So limitation helps you identify what can be a common solution for most on one of your guests.
But our Gazidis is a bit to be about your version on the target machine and it sure has all of the amenities
the same base for other machines that you just cannot with this could be different.
So I guess now you have a clear understanding of how to use Nessus.
The performance can just need to learn more about the different types to understand when to use this
type of scan.
Not believing that as an exercise.
Hopefully you'll be clear with it.
In this video we have learnt about how to use Ness's to perform a scan then the next video will see
how it breaks for the next iscan output.
They use how busy you did think you.