Fedora安裝Nessus 4.2.1

Nessus 4.2.1分為服務端和用戶端，我安裝在同一台機器上，4.2.1的用戶端是web Interface

(Nessus 4.2 comes with a built-in web interface which lets you start your scan and analyze the results from any system which can connect to your Nessus scanner.)

在瀏覽器中輸入https://[server IP]:8834/，記住要用https

 

1.下載rpm包進行安裝

我一開始裝的是Nessus-4.2.1-fc10.i386.rpm和Nessus-4.2.1-fc12.i386.rpm，但是在裝的的時候都是出現了

依賴性問題。後來下載了Nessus-4.2.1-fc6.i386.rpm，安裝成功。

在命令列用rpm命令直接安裝也可以。

 

接下來要註冊和添加使用者，大概過程如下所示（轉自http://www.woniu.me/node/28）

 

 rpm –ivh Nessus-3.2.0-es4.i386.rpm
Preparing... ########################################### [100%]
1:Nessus ########################################### [100%]
nessusd (Nessus) 3.2.0 for Linux
(C) 1998 - 2008 Tenable Network Security, Inc.
Processing the Nessus plugins...
[##################################################]
All plugins loaded
- Please run /opt/nessus/sbin/nessus-adduser to add an admin user
- Register your Nessus scanner at http://www.nessus.org/register/ to
obtain all the newest plugins
- You can start nessusd by typing /sbin/service nessusd start

2.添加nessus帳號

# /opt/nessus/sbin/nessus-adduser
Using /var/tmp as a temporary file holder
Add a new nessusd user
--------------------
Login : admin
Authentication (pass/cert) [pass]:
Login password:
Login password (again):
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that admin has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser(8) man page for the rules syntax
Enter the rules for this user, and hit ctrl-D once you are done:
(the user can have an empty rules set)
Login : admin
Password : ***********
DN :
Rules :
Is that ok ? (y/n) [y]
user added.

3.啟動nessus服務

# /sbin/service nessusd start

#ps -ef |grep nessus

root 5341 1 0 01:44 ? 00:00:39 nessusd: waiting for incoming connections 服務已啟動

 

 

 

 

4.安裝啟用碼

 

驗證碼通過http://www.nessus.org/register/獲得，選擇需要的版本，個人選擇homefeed，然後填入電子郵件，會收到一封

含有註冊碼的郵件，其中介紹了如何註冊。

 

# /opt/nessus/bin/nessus-fetch -–register <驗證碼>

然後可以通過web瀏覽器來訪問Nessus伺服器了。