All right.
Good afternoon.
We are going to install and use Nessus today and start off with I just punched into Google Nessus install
Linux because we're on a Linux machine.
Hit that little link and you can see that it provides me a download button right here.
I'm going to click that download button.
It's going to take me to a new website.
It's going to do NASA's ten 0.7.3.
That is the current version available.
But we're not on an ubuntu system.
We're on a Debian.
So I'm going to scroll up until I find Debian.
Here it is.
We're going to do the amd64 right there.
And we're going to hit that little download button.
Now I've already downloaded my version just to speed this video up.
Uh, the next thing we have to do is we go back after we're done downloading.
And if you click this little plus button right here, it gives you the command right here.
So that DHCP dpkg I'm going to grab that I'm going to copy it.
Now you'll notice I didn't grab the Nessus nastiest version.
There's a reason why.
Because you'll notice that it has version number right there.
And I like hitting that tab button.
So I'm going to open up my terminal and blow this up for you.
First thing I need to do is get into my downloads folder.
So I'm going to do CD downloads like that doing LS.
And we can see that we are actually using Nessus right there.
So I'm going to input that paste that clipboard.
And instead of you can see here that I tried to do it earlier.
That's all right.
We're going to do Nessus.
And then if I just hit tab you can see that it auto fills.
Requires superuser privileges.
So we'll put sudo in front of it.
Sudo.
There we go.
And now we're ready to go.
It says you can start Nessus scanner by typing then start Nessus service.
So I'm just going to grab all that, copy that selection and then we'll just use it in here And we can
start it once we've started it.
We then go to this website right here.
I'm just going to do open link.
We're going to do advanced and I'm going to go and accept the risk.
And here we are.
We're at the NASA start page right now.
We've installed NASA's onto our system.
Now we need to actually scan something with it.
So the first part of our process is to make sure we actually have something to scan.
And you can see here that I've got two running in the background.
Uh, key object two is off of Vulnhub.
You can remember to find that or you can download that off of the specific systems.
All right.
So I'm going to open up my terminal the very first thing I need to do right off the bat before I do
anything else is find that key two system.
And in order to do that I'm just going to do an ifconfig.
You can see I'm on 10.0.2.9.
And then I'm just going to do an nmap.
Sweet.
I'm just going to do a switch SN 10.0.2.0 with a slash 24 network, and it should identify where that,
uh, key two is actually pushed out at.
Now I'm on 2.9, which means Archaeopteryx is most likely on 2.5.
All right.
Next thing we need to do is actually start our Nessus.
So I'm going to do a sudo, then systemctl and then start start Nessus d just like that and enter.
Type in that password for it.
And I should have Nessus starting right up.
To get the status of NASA's, I'm going to do a sudo systemctl and then status.
And of course NASA's e just like that.
And we can see here that, our system is running there.
It is just like we want.
Okay.
Uh, if we had it disabled, let's say that something was disabled.
For whatever reason, we could do a system.
Uh, this is enabled, so I could do that.
Now I can do, uh, sudo and then system ctl and then enable and then necessary like that.
And we've enabled it.
And now if we did a status again we can see here that it has in fact been enabled.
Okay.
So in order to get on an SS it's actually a web UI, a web GUI interface, I'm going to open up Microsoft
or I shouldn't say Microsoft.
I'm opening up Firefox just like that.
And we're going to provide that onto localhost.
So it's just going to be if I open up the uh, page, it's going to be on localhost right here.
And I can do it right here at NASA's essentials.
There we go.
And you can see that I am there now when you do yours.
Yours may not be kindred, right?
Depending on how you set it up, it could be something else.
Okay.
So it could be localhost.
It could be however you set yours up in my case, mine is under kindred .8834.
And I'm just going to go ahead and sign in.
Okay.
All right.
Now I've already done some scans on the system, but I'm going to walk you through the process.
Okay.
The very first thing is we want to let it update everything that needs to be updated.
Okay.
And you can see that it started and then it was successful.
Just let it finish.
Any updates?
The first time that you run Nessus, uh, expect to just let it sit there for about about 2 to 3 hours.
Right.
Go get some coffee.
Let it finish updating.
It needs to go through and actually, uh, do some software updates.
Right.
And we can see software updates right here You can update all the components or whatnot.
Okay.
But under the events is where we actually see what's going on.
All right.
You can see the last time I logged in this system was actually May 29th.
And it updated based off of that.
All right.
Now once you've let it update you can go to scans.
Okay.
From scans you can see past scans.
But you can also do a new scan.
Now you can see that I've already performed that scan just because.
And if I wanted to relaunch it, I could relaunch a new scan.
I'm going to do a new scan, but I'm going to provide it and name it something else, because I want
to be able to look at these results.
So we're not waiting a couple hours for that to take place.
The scans that I can do are all right here.
Okay.
I can do a host discovery scan just to figure out where things were.
If I didn't want to use nmap, I could utilize that.
I could do a basic network scan, an advanced scan.
I mean, there's all kinds of different scans that you could utilize.
Some of them you have to upgrade to.
You have to pay money to go through with the necessary essentials, which is what we started.
We're good to go, right?
You can see here that a new version of Nessus is available.
And if I wanted to, I could apply that.
Now, I'm not going to.
For today's purposes, it doesn't make sense to.
But you can see all the different scans associated that I could, I could go through.
I'm going to do a basic or I should say I'm going to do an advanced cat.
If I start the advanced scan I just click on it.
I can name it whatever I want.
I'm going to name this one test number two.
Just like that, I can provide a description the objects to and then basic scan just like that.
And you can see that it's going to go to my scans folder.
And then I need to provide it a target.
Now if you remember correctly, we were on 10.0.2.5 just like so.
And then I just save it once I've saved it.
You can see that test number two is on demand schedule and has not been scanned.
And to start it I just hit that launch button just like that, and it's going to start scanning through
the process.
While it's scanning, let's take a look at the scan that we already performed, because there shouldn't
have been much changed.
If I click on that and you'll have the similar window once your system is done scanning, you can see
that I've got the IP address, the different vulnerabilities.
You can see that it identified two critical vulnerabilities 21 high 21 medium, seven low and 63, which
are informational things that we should be aware of that we may want to take care of.
If I click on the vulnerabilities tab, it provides me, in descending order of Cvss score highest to
lowest, exactly what I'm looking for.
Okay.
And you can see that if I click on that, it'll go through and actually run it out right from there.
I can click on any of these that I want more information on.
For instance, I want more information on Unix operating system Unsupported version detected.
Because Archaeopteryx two is running such an older operating system, the system is detecting it and
saying, hey, this operating system isn't supported anymore.
It has some very major holes in it.
We should consider updating this operating system.
We can also see that critical 9.8 SSL version two and three protocol detection.
If I click on that, we can see a description.
We can see the remote server accepts connections encrypted using SSL 2.0 or 3.0, and these versions
are affected by several cryptographic flaws.
We can see the insecurities if we scroll down, we can see the output associated with it.
If I scroll back up, I can see remediations that the system recommends that I do and it says hey,
action, PHP version or OpenSSL, and we can follow that along and see what it has to do.
We can also see a history of when the scans were taking place.
So if something changed if I was doing a scan, say, once a week or once a month or whatnot, I could
see what was going on, and I could see all the past history of different scans associated with it.
Let's go back to this vulnerabilities window right here.
And you can see that I can look at some more items.
Right.
I can see timestamp.
And again it gives us the same basic flow and structure across the board of what we want to do.
It could even provide us the different remediations associated with it.
So we can search different actions.
We can again look at the history.
We can again look at the hosts associated with it.
And that's this just gives us a good idea of what's going on across the board.
Right.
If I did not want to see this alarm for whatever reason, let's say that this was a legacy system that
we knew we had problems with, and I didn't want to see it in the future.
I could hit that snooze button and I could snooze this for one month, and any future scans that I reran
will not populate with that, right?
I can also modify it if I didn't want a critical.
Let's say that I said, you know what?
This isn't critical.
It's actually, uh, information or I don't want to see this result.
I could do that.
A lot of times we're not going to do the hide, uh, result unless we're running a system.
And I ran into this issue a while ago where we ran a scan against a windows machine.
Uh, and it was populating with a bunch of Linux vulnerabilities.
In that case, we hid those vulnerabilities because we really didn't need to see Linux vulnerabilities
on a windows machine.
They were irrelevant.
They were false positives.
Uh, and so we were able to go through that process.
And that's NASA's in a very short time frame.
It's a great tool.
It really is.
And if you have the paid version, it's even better.
All right.
Now this really does put a lot of effort and time into their software.
Uh, and I can't say enough nice things about it.
It does a great job.
All right.
With that said, that's it for this video.
We will see you next time Thanks everyone.