Nessus

Nessus ↗was developed as an open-source project in 1998. It was later acquired by Tenable in 2005 and became proprietary software.

• It has extensive vulnerability scanning options and is widely used by large enterprises.
• It is available in both free and paid versions. The free version offers a limited number of scan features. In contrast, its commercial version offers advanced scanning features, unlimited scans, and professional support. Nessus needs to be deployed and managed on-premises.
• It has several features that allow you to perform continuous monitoring and compliance analysis.
• Nessus can be downloaded from https://www.tenable.com/downloads/nessus ↗.

NOTE Tenable also has a cloud-based solution called Tenable.io. For information about Tenable.io, see https://www.tenable.com/products/tenable-io ↗.

• to install download nessus file, dpkg -i [nessus file]

• to start: /etc/init.d/nessusd start

• You can start Nessus Scanner by typing /bin/systemctl start nessusd.service

• Then go to https://kali:8834/ ↗ to configure your scanner

• signup and login

• create a basic scan

  • give name and discription
  • set target ip
  • set scan type in discovery (ports)
  • set scan type in assessment (vulnerabilties)
  • save and launch