Back to Linux Basement

Nessus on Ubuntu | Linux Basement Presents: Chad's Blog

Nessus on Ubuntu

I found this article, which gives a great run through on installing Nessus on Ubuntu.

http://www.darknet.org.uk/2006/11/installing-nessus-on-debian-based-oss-like-ubuntu/

Installing:

I personally use apt-, however, you may choose any other package manager.

apt-get install nessus nessusd -y

This will install the nessus client and server, and the -y is used to answer YES to the confirmation of apt-get.

We have now installed both the client and the server. Let’s proceed to the addition of a user:

nessus-adduser

Display:

gouki@8104:~$ sudo nessus-adduser
Using /var/tmp as a temporary file holder
Add a new nessusd user
——————–


Login : Whateva
Authentication (pass/cert) [pass] :

Login password :
Login password (again) :
User rules
———-
nessusd has a rules system which allows you to restrict the hosts
that darknet has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser(8) man page for the rules syntax
Enter the rules for this user, and hit ctrl-D once you are done :
(the user can have an empty rules set)
Login : darknet
Password : ***********
DN :
Rules :
Is that ok ? (y/n) [y] y
user added.

About this display:

When asked about Authentication (pass/cert) [pass] : just press enter, as we will not use any.
When asked about rules for the specific user, press CTRL+D, as we will not enter any rules for


Starting the Daemon:

By default, nessusd has not started. To manully force him to, you will need to do the following:

sudo /etc/init.d/nessusd start

Registering Nessus:

Nessus will work without being registered, however, it will have
limitations. Unnecessary limitations, since it is easily registered.

Nessus Registration page - Go here and start the proccess.

After you have entered your e-mail address, the instructions on how to register will not work on Debian-based OSs.

On the eMail from the Nessus team, you will be instructed to this path:

/opt/nessus/bin/nessus-fetch

, however, the path should be replaced by

/usr/bin

, making the complete registration command:

sudo /usr/bin/nessus-fetch –register XXXX-XXXX-XXXX-XXXX-XXXX

You should now have a complete and working installation of Nessus. Enjoy and remember, automatic scanners are not 1337! =)

TIP: Before starting to use Nessus, update the plugins by doing the following:

sudo nessus-update-plugins
[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
Monday, September 10th, 2007 Open Source, linux, technology

2 Comments to Nessus on Ubuntu

  1. Excellent instructions. Thanks!

  2. Rob on December 1st, 2007
  3. You didnt mention the client. You can use a gui client (a few available on windows or linux) or you can just run scans from the command line.

  4. Peter on April 3rd, 2008

Leave a comment

You must be logged in to post a comment.

Search

 

Chad's Twitter

Favorites