Nessus is a powerful security scanner for finding and reports flaws/holes in your security configurations for many different platforms. You need to register for a free or pay activation code.
or
- yum install nessus-core nessus-server nessus-gui nessus-libraries nessus-client
- nessus-adduser
[root@vaio kandle]# nessus-adduser
Using /var/tmp as a temporary file holder
Add a new nessusd user
----------------------
Login : root
- Type root at the Login: prompt.
Authentication (pass/cert) [pass] :
- Press Enter to use for password based security when running Nessus.
Login password :
Login password (again) :
- Type a Password.
- Reenter Password.
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that root has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser(8) man page for the rules syntax
Enter the rules for this user, and hit ctrl-D once you are done :
(the user can have an empty rules set)
- Hold Ctrl and press the D key to save an empty rule set.
Login : root
Password : ***********
DN :
Rules :
Is that ok ? (y/n) [y] y
- Type y and press Enter to confirm new user.
user added.
-------------------------------------------------------------------------------
Creation of the Nessus SSL Certificate
-------------------------------------------------------------------------------
This script will now ask you the relevant information to create the SSL
certificate of Nessus. Note that this information will *NOT* be sent to
anybody (everything stays local), but anyone with the ability to connect to your
Nessus daemon will be able to retrieve this information.
CA certificate life time in days [1460]:
- Press Enter to accept the default 1460 days.
Server certificate life time in days [365]:
- Press Enter to accept the default 365 days.
Your country (two letter code) [FR]: US
- Type US if your are in the United States of America.
Your state or province name [none]:
- Press Enter to leave none.
Your location (e.g. town) [Paris]: Home
- Type Home
- Press Enter to continue.
Your organization [Nessus Users United]: KAndle Consulting
- Press Enter to accept the default, Nessus Users United.
-------------------------------------------------------------------------------
Creation of the Nessus SSL Certificate
-------------------------------------------------------------------------------
Congratulations. Your server certificate was properly created.
/etc/nessus/nessusd.conf updated
The following files were created :
. Certification authority :
Certificate = /etc/pki/nessus/CA/cacert.pem
Private key = /etc/pki/nessus/private/CA/cakey.pem
. Nessus Server :
Certificate = /etc/pki/nessus/CA/servercert.pem
Private key = /etc/pki/nessus/private/CA/serverkey.pem
Press [ENTER] to exit
- nessusd -D
- nessus-fetch --register xxxx-xxxx-xxxx-xxxx-xxxx
- cd /var/lib/nessus/plugins
- nessus-fetch --plugins
- tar xzvf all-2.0.tar.gz
- nessusd -D
