以CentOS 6为例，讲解如何安装Nessus 4.4.1 。
相关阅读：[免费网络和主机漏洞评估程序Nessus 4.2.0安装试用]、[Nessus浏览器打不开的解决方法]、[利用Nessus进行WEB应用安全扫描]
操作系统游侠推荐用wdlinux——一个精简的CentOS，删除了一些无用的程序，速度飞快。下载地址为：http://www.wdlinux.cn/download_center 选择 基于 CentOS 6.0的精简版，游侠这里用的是62位版本。
CentOS的安装就不说了，基本上下一步就OK，特别是wdlinux更加简单，只需要回车……装完重启，root登录系统后运行 setup，选择网络配置，设定IP地址、子网掩码、网关等就OK。
确保CentOS可以上网，你可以运行 ping www.163.COM，看网络是否通畅。如果通畅则运行：
wget -O nessus.rpm "http://downloads.nessus.org/nessus3dl.php?file=Nessus-4.4.1-es6.x86_64.rpm&licence_accept=yes&t=48cb3b8bf81326e63ce1ec461597442e"
既：从nessus官网下载程序，并保存为nessus.rpm，根据你的网络速度会持续几分钟。看到“nessus.rpm saved”的时候就说明程序已经下载完毕。现在开始安装nessus，运行：
[root@wdCentOS6 ~]# rpm -ivh nessus.rpm
Preparing... ########################################### [100%]
1:Nessus ########################################### [100%]
nessusd (Nessus) 4.4.1 [build M15078] for Linux
(C) 1998 - 2011 Tenable Network Security, Inc.
Processing the Nessus plugins...
[##################################################]
All plugins loaded
- Please run /opt/nessus//sbin/nessus-adduser to add a user
- Register your Nessus scanner at http://www.nessus.org/register/ to obtain
all the newest plugins
- You can start nessusd by typing /sbin/service nessusd start
[root@wdCentOS6 ~]#
现在我们添加一个帐号：
[root@wdCentOS6 ~]# /opt/nessus//sbin/nessus-adduser
Login : youxia
Login password :
Login password (again) :
Do you want this user to be a Nessus 'admin' user ? (can upload plugins, etc...) (y/n) [n]: y
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that youxia has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser manual for the rules syntax
Enter the rules for this user, and enter a BLANK LINE once you are done :
(the user can have an empty rules set)
Login : youxia
Password : ***********
This user will have 'admin' privileges within the Nessus server
Rules :
Is that ok ? (y/n) [y] y
User added
[root@wdCentOS6 ~]#
现在我们添加了一个名为“youxia”的管理员帐号，然后打开 http://www.nessus.org/products/nessus/nessus-plugins/obtain-an-activation-code 获取一个激活码。选择“Using Nessus at Home”，然后输入你的first name、last name、E-Mail之后，去你的邮箱看看，你会收到一封名为《Nessus Plugin Feed》的邮件。下面会有这样一行：
Your activation code for the Nessus HomeFeed is XXXX-XXXX-XXXX-XXXX-XXXX
这个就是你的激活码了，在CentOS下面输入：
[root@wdCentOS6 ~]# /opt/nessus/bin/nessus-fetch --register XXXX-XXXX-XXXX-XXXX-XXXX（回车）
Your activation code has been registered properly - thank you.
Now fetching the newest plugin set from plugins.nessus.org...
然后，就是漫长的等待……的确是漫长的等待！（因为连接到nessus国外的服务器很慢），等到这个提示结束，就成功了！
输入 /opt/nessus/sbin/nessus-service -D 来启动你的Nessus，然后打开浏览器，输入：https://你CentOS的IP地址:8834 （记得是https，并要8834的端口号）来访问你的Nessus了！
相关阅读：[免费网络和主机漏洞评估程序Nessus 4.2.0安装试用]、[Nessus浏览器打不开的解决方法]、[利用Nessus进行WEB应用安全扫描]
操作系统游侠推荐用wdlinux——一个精简的CentOS，删除了一些无用的程序，速度飞快。下载地址为：http://www.wdlinux.cn/download_center 选择 基于 CentOS 6.0的精简版，游侠这里用的是62位版本。
CentOS的安装就不说了，基本上下一步就OK，特别是wdlinux更加简单，只需要回车……装完重启，root登录系统后运行 setup，选择网络配置，设定IP地址、子网掩码、网关等就OK。
确保CentOS可以上网，你可以运行 ping www.163.COM，看网络是否通畅。如果通畅则运行：
wget -O nessus.rpm "http://downloads.nessus.org/nessus3dl.php?file=Nessus-4.4.1-es6.x86_64.rpm&licence_accept=yes&t=48cb3b8bf81326e63ce1ec461597442e"
既：从nessus官网下载程序，并保存为nessus.rpm，根据你的网络速度会持续几分钟。看到“nessus.rpm saved”的时候就说明程序已经下载完毕。现在开始安装nessus，运行：
[root@wdCentOS6 ~]# rpm -ivh nessus.rpm
Preparing... ########################################### [100%]
1:Nessus ########################################### [100%]
nessusd (Nessus) 4.4.1 [build M15078] for Linux
(C) 1998 - 2011 Tenable Network Security, Inc.
Processing the Nessus plugins...
[##################################################]
All plugins loaded
- Please run /opt/nessus//sbin/nessus-adduser to add a user
- Register your Nessus scanner at http://www.nessus.org/register/ to obtain
all the newest plugins
- You can start nessusd by typing /sbin/service nessusd start
[root@wdCentOS6 ~]#
现在我们添加一个帐号：
[root@wdCentOS6 ~]# /opt/nessus//sbin/nessus-adduser
Login : youxia
Login password :
Login password (again) :
Do you want this user to be a Nessus 'admin' user ? (can upload plugins, etc...) (y/n) [n]: y
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that youxia has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser manual for the rules syntax
Enter the rules for this user, and enter a BLANK LINE once you are done :
(the user can have an empty rules set)
Login : youxia
Password : ***********
This user will have 'admin' privileges within the Nessus server
Rules :
Is that ok ? (y/n) [y] y
User added
[root@wdCentOS6 ~]#
现在我们添加了一个名为“youxia”的管理员帐号，然后打开 http://www.nessus.org/products/nessus/nessus-plugins/obtain-an-activation-code 获取一个激活码。选择“Using Nessus at Home”，然后输入你的first name、last name、E-Mail之后，去你的邮箱看看，你会收到一封名为《Nessus Plugin Feed》的邮件。下面会有这样一行：
Your activation code for the Nessus HomeFeed is XXXX-XXXX-XXXX-XXXX-XXXX
这个就是你的激活码了，在CentOS下面输入：
[root@wdCentOS6 ~]# /opt/nessus/bin/nessus-fetch --register XXXX-XXXX-XXXX-XXXX-XXXX（回车）
Your activation code has been registered properly - thank you.
Now fetching the newest plugin set from plugins.nessus.org...
然后，就是漫长的等待……的确是漫长的等待！（因为连接到nessus国外的服务器很慢），等到这个提示结束，就成功了！
输入 /opt/nessus/sbin/nessus-service -D 来启动你的Nessus，然后打开浏览器，输入：https://你CentOS的IP地址:8834 （记得是https，并要8834的端口号）来访问你的Nessus了！
No comments:
Post a Comment