In the previous lectures, we have seen what is meant by a vapidity that is a the assessment and penetration
testing and now it's time to get your hands dirty.
So let us start learning about Nessus.
In this lecture, you will learn what is necessary, why do we need Nessus while a vulnerability assessment
and penetration testing tool and what are the advantages and disadvantages of using Nessus?
Let's get started.
Nessa's is a remote security scanning tool which scans a computer and raises an alert if it discovers
anyone the relatives and the malicious hacker could use again to any computer that we have connected
to network.
Basically, Nizza scanner scans.
All the vulnerabilities on the target machine or Target website reduces the effort of normal penetration
testers who would rather take hours and days to manually test a website.
So it is a very handy tool and security experts prefer Nessus 130 scanner nowadays, there are also
many types of scanners, but Nessus still tops the list.
This doesn't come as a free tool, but it has a trial version and a free tool in which they provide
only six to seven IP addresses you can scan.
The professional tool is very costly and therefore attackers and vendors and testers use the free version
of it.
So why do we need nurses, nurses is used to identify which operating systems and services are running
on which ports and therefore the open ports.
It also tells us the available vulnerabilities present on the system.
Nessa's helps us to identify which software components are vulnerable to attacks FTP, SFH, SMB and
more definition also checks if the target machine or their target host is is in compliance with the
various network policies or not.
So what's next in the next lecture or in in the few minutes will start downloading and installing Nessus.
But before that, I would like to tell you a few advantages and disadvantages of using Nessus
being one with the scanner tool.
The biggest advantage of Nessa's is timesaving and accuracy.
And this is a product of rapid saving and therefore it has been rated as one of the top one literately
scandals of all time.
But there is one disadvantage.
It is a machine, it is a tool, and this is just a piece of code.
And therefore it can also create some errors.
The fact that these automated scanners produce false positives places in picture, the penetration testers
who will manually check the flaws which are present on the system level of normal penetration.
Tester will use automated tools, but will also manually test whether these when abilities are present
or not.
So let's start downloading Nessus.
So let us start downloading Nessus, go to Google and type download Nessus.
And then hit enter, you can specify the operating system virgin.
So this is a product of rapid seven act enabled security, so go to the link.
In order to install Nessus, you will need an activation call.
But how to get that activation code first?
After downloading, you have to go to the website and you can see get an activation code that you have
to click there.
You have to register yourself and they will send an activation code depending upon your downloads.
So depending upon your operating system, you're supposed to download the version of the Nessus.
I will download the Vin Amisi version for Windows Installer.
So depending upon your system, please download, accept everything and then it will start downloading.
Nessus, I have already installed Ines's and download it and configure it so I won't be downloading
and showing you again.
The only thing that you need to take care is the about the activation code.
So after installing nurses, your job is to get the activation code via registration so you can see
the button there.
Just click there and click Nessa's Essentials Free Register now and ask you for all the details, name,
user name and email.
And in the email, you will receive the activation code, which you're supposed to enter, and then
it will start.
So in the next lecture, we will start with configuring and creating a policy in the Nexus tool.