In this video. We are going to cover Network vulnerability scanning
with nessus.
So, let's Dive In.
Nasus is simply one of the most popular
industry recognize vulnerable Discounters,
which is commonly used within a cyber security
industry by both cybersecurity professionals on
researchers nessa's helps cybersecurity professionals
to automate and even
perform vulnerability scanning to
discover any sort of security weaknesses and also
determen the severity risk
level for each security flawed as
found on his system additionally nessus provides
a recommendations and suggestions on
how to resolve various security
flaws that it has discovered. So in
this video, we'll be taking a look at installing performing
uneven analyzing the scan results
from nessus. So in shorty
Paul all your Carly Lenox virtual machine, as you
can see my own is already powered on and let
us open the terminal
Wanted two moles open we can simply test our
internet connectivity to ensure that we
have a good unstable internet connection.
So as always let's spin Google as in
ping www.google.com -
C4, so we'll be sending four icmp
messages to google.com and once
our internet tests very well. We'll get
four responses.
With this ping, it will test both DNS
resolution and test internet connectivity. So great.
Our internet connection seems to
be working fine.
now to download nasus There's a free version
that we can use which is called necess Essentials and let's
head over to all web browser where
you can simply search nasus Essentials like
so
you can scroll down a bit and we're gonna click on this
URL here, which says NASA's Essentials
vulnerability scanner.
To necess Essentials, it provides limited features
as compared to the professional Edition. So
simply because that we are just using this
within our love environment. The necess essentials will
allow us to do exactly what we need
in this leading exercise. As you
can see necess essential is part of the necess family
and it was formally known as necess home.
It's simply allows you to perform scans within
your environment up to 16 IP addresses
puscan with a seam
high speed in depth assessment on each
and less scanning convenience doesn't necessarily dot Nessa
subscribers. Enjoy.
So to get necess Essentials, we definitely need
to get a download link and also a
valid license key since necess essential is
free. We can simply complete this registration form
and enter a business
email address. If you don't have one you can
simply enter a free email address and you
will get an activation link shortly.
Once you complete the activation form,
well together registration, you will
be then be redirected to this speech
which says hey, thank you for a distorting
for necess Essentials. And please check your
email for Activation Code. The main thing
about a speech is it provides us with a download
link for nessus so we can simply click on
the download button as shown on the right
side like so and this will allow us to
select all version of nessus for our Kali
Linux machine.
We can simply choose the latest version and right
now the latest which I selected by default, which
is 10.4.1.
For the platform we can simply use Debian.
Let's see if there's a deviant Vision
that is available.
And yes, there is the devian EMD 64.
Select that version simply because Kali lyrics
is built upon the DB on flavor or
flanax.
once you select Lennox tibian amd64
simply click download
Once you click download you will need to accept the
license agreement simply click on I agree
like so and the download should begin
shortly. Ah, and there we go. My download is
actually completed. So I'm going to minimize the screen. I'm
gonna click on
this icon here, which will allow me to upon the
file explorer on Kali Linux.
Then I'm gonna select downloads.
and on downloads, I'm gonna click on open folder like
so
and here we go actually have the nasus dbn
package file already downloaded on my
system.
To get started with installation. I'm going
to head over back to my team now window.
Like so gonna clear my
terminal and this time I'm
Gonna Change directories to my downloads folder.
Firstly if I type PWD I
can see my present working directory as
home / Carly.
So now let's type CD.
Downloads like so and hit
enter.
Now we can see the terminal change a little bit.
If I type PWD once more I can
see now that my present working directory is /
home / Carly slash downloads.
Next I can type LS to
list all the files and folders located
within this directory. I'm currently we have
the nessus installer package.
to install nasus simply type sudo
because we need privileges.
d p k g like
so
- I and specify the nasus
file name like so
Next we are going to press enter it is going to
ask us for our Kali Learners password. Well our
user account simply enter your password.
Remember when entering a password it's invisible.
simply hit enter and now
the cut and now the installation process
will begin.
well
Seems as though it has completed a lot faster than
I thought.
To get started with necess. There's a couple of things we need to
note firstly. We need to start the necessary this
by using this command here and then to
visit nessus we need to go to this URL.
So I'm going to copy this.
That I'm going to paste it like so.
and hit enter
and now it is asking for authentication simply enter
the password for your Carly Lenox
user account and click authenticate.
And once everything checks out. Well, this should be fine.
Next copy this URL which
is https. Colon slash
slash Kali colon.
Eat it three four.
Anytime we need to access nessus. We
always need to go to this URL. So I'm
going to copy the selection going to head over
to my web browser.
I'm going to open a new tab and enter
the URL like so and press enter.
You will definitely get a security warning stating a
certificate is a cell sensitive yet. Simply click
on advanced.
scroll down
accept the risk and continue
As you can see we have a few options to select before we
get proceeded in deploying SS.
We have registered for the necess essentials. So simply
click or necess Essentials and then
click continue.
Now we'll need to enter.
Our activation code well three specific this screen
is asking us to get an activation code.
But if you recall just a few minutes ago, we
have already made this requests, so please
check your inbox for Activation Code before we
proceed photo.
Simply click on skip because we are not requesting a
new activation code.
And here you will need to enter the activation code that is
found within your email.
So I'm gonna pause the screen just for a
few seconds enter my activation code and then
click next I highly recommend you do the same
simply check your inbox your email inbox
for the activation code copy and
paste activation code in this box and then click on
continue.
Okay, great. So now that your place your
activation code and you click next let's create a
user account for this user account. I'm just
going to keep it simple. I'm just going to call it administrator like
so and for the password, I'm gonna
set a password that I could remember.
Once you set your username on your password simply click
submit.
And right now the setup process is going to begin. This process
usually takes a few minutes
to pop 10 to 20 minutes sometimes because
Nexus is going to download all the
additional installation file updated plugins
and even update the vulnerability d2bees. I'm
gonna pause this video when this process
is completed. We will resume.
During the setup process encountered a type
of download error. It is stating that an unexpected
error could while downloading plugins run
NASA CLI update command and
touch the result problem.
So let's use this command to stop the necessary this
let's enter our Carly password to authenticate our
Authority.
Let's click authenticate. And this should stop
the service.
Next let us update all
current logins with an SS.
We can use this command which is slash opt-in necess
CLI update dash dash
all create enter and same
page permissions. Denied Let's see
we should have run sudo this
Let's cancel this.
And this time I'm going to use sudo in front
of the actual command.
And currently it is fetching the latest set of
updates.
So I'm going to leave this run because this will
take a very long time to complete. I'll pause
the video once this is completed. We will resume.
Okay, great. So the dollar was completed it still
giving us one error stating network error
while receiving data.
But the last thing it says is it was
completed and all core
components are now up to date and changes will.
Will be automatically processed my nessus. Okay. So
let's head over back to our web browser
where this window is and let's do
a refresh and see what happens. Hmm. Okay,
so we are unable to connect because
the necessary this is not running.
Which I forgot to mention. So let's
use our power a couple of times like so.
And let's start the
necessary this and hit enter.
Enter your user password it was
and get and this should start a service
now. Let's head over back to the web browser.
Refresh one more time and let's see having some
difficulties connected refresh a few
more times. And finally we have the login page.
So now let's login. So I'm
going to click on remember me.
gonna set my username which is
administrator gonna set my password like
so I'm gonna click signed in
once everything works. Well, we'll now be able to
login within our Nexus using interface.
As you can see the user interface seems to be
quite simple to use and isn't too complicated.
Let's click on all scans to see
whether we have any scanning profiles available. Nope.
We don't have any.
Let us refresh. So one more time.
So it seems as though that even do the plot plugins
cut.
So it seems us to even do the plugins or downloaded
it wasn't set up properly.
let's click on settings like so let's click
on software update like so
Let's click on manual software
update as soon.
And let's select update all components and
click continue.
So this process should take a few moments to complete.
I'm going to pause the screen once more once this is
completed. We will continue.
As shown on the top right hand corner the NASA's
functionality Still Remains, very limited due
to not having the plugins available.
Let's use another technique to solve this problem.
So open the terminal like so let's
clear the screen.
and let's stop the necess service so you
can do service like so
nasus D and stop
simply enter your user credentials
Once it necessary to stop let's actually reset necess.
The reset message you can simply use this command.
and hit enter
and all we require permission to actually
stop necess. So let's use sudo instead.
Followed by the same command hit enter.
and enter your Kali Linux password
and saying resetting necess configurations will permanently release
all your settings and cause nurses to become.
Unregistered do you want to continue? Let's type y
for yes, and press enter. So now we configurations
is actually reset and this
is the registered what we need to do
next is simply press up
because we haven't used the same commands this
I'm gonna type fetch.
space Dash Dash
register and you will need to enter your activation
code after the word register.
Once our activation code is entered simply, press
enter and this will re-register nessus
with your activation code.
Now it is attempting the fat sum updates.
So I'll pause this video. I will continue once
updates are completed.
So now let's attempt to rebuild the database simply
use this command and let's
use a sudo command to ensure. There's no
restrictions.
Next let us restart the NASA service.
Lastly we can verify the registration went well.
As we can see the updates are configured correctly.
And now let's check for any new updates.
Alright great. So the downloads completed on everything
seems to look good so far.
All right. Let me head over back to the web browser.
on refresh
Let's see. Do we have our Network scans available?
It's the same plugins are compiling Asus functionality will
be limited on till the compilation is
complete.
All right. Well we can give this some movements.
Hopefully the compilation will perform quickly.
So after about 10 to 20 minutes
the compilations finally completed and
we actually get the welcome message
or nessus so we can simply click on
close for now and we should be able to access
a plugins.
and policies so let's click on policies on
the left hand corner like so
and here we can create new policies or we
can even use contemplates. Let's click on
scan templates.
This contemplates helps us to actually perform
specific type of scanning. So for
example, we can perform whose Discovery
scanning.
We can even perform B6 scanning Advance malware.
We can even perform web
application testing scans right
from this.
And the cool thing is look at this is even
a zero log on remote scan a
log for Shell scan a log
for Shell remote check and even
a log for Shell vulnerable vulnerability cut.
analog for Shell vulnerability ecosystem
Which is pretty cool screw it on further. We
can see nasus while the professional version of
nessus could even help us performing various types
of audits such as what it
is a quarterly PCI DSS scan or another
type of audit.
For our example or our demonstration. Let's click
on Advanced scan.
On Advanced scan, we can simply set in
Need for scan. So let's call this of this.
scan like so we can set a description such
as
scanning a vulnerable
machine
Within
the Panthers net
lab environment like so
We can specify a full to actually save the scan. We could
even specify the targets what it
is a range of IP addresses and I subnet
or even a single IP address.
So let's actually tune on one of our virtual machines.
I will scan that particular virtual machine
with nasus.
Head over back to Dropbox like so and let's
see like metasloidable tree win VM.
Before trading on this virtual machine Let's click
on settings.
Network and let's ensure it is connected to
network adapter one.
the pen test Network
and that adapted to is actually an evil as
well.
It will simply ensure that this machine is connected to
the right virtual networks within our lab environment
on it will have no sort of issues whatsoever.
So let's give this a few seconds to pull one properly
and then we'll log in to retrieve the IP address
from the pentestnet network adapter.
Let's click on input.
keyboard insert control delete
like so
then let's click on administrator. Let's login
with vagrant or vagrant as
a password.
Once we're logged in we'll open the windows command
prompt and simply use the IP
config command to retrieve the IP address on
the network adapter that's connected to the
pen test net Network like so
And here we can see it is using 172 tt1
the TT. Keep
in mind the IP address might be different on your
machine. Please be sure to verify the IP
address before doing any sort of scanning or testing.
Before I decide to insert IP address, let me
ping the machine to determine that I have full and turn
connectivity. It's ping 172.
City one dot and let's verify
this one more time.
1 TT
going to do - c 4 to send
four icmp messages and here I have
full and turn connectivity.
So I'm going to copy this IP address.
and head over back to NSS gonna enter the IP
like so
then I'm going to click on launch now.
I can see the scan and continues can
later on, but I'm going to click launch so this
car could happen. No.
So right now you can see this little K icon that is tuning
and this indicates a scan is currently running.
Discount may take a few minutes to complete. So again,
we are going to pause the screen until the
scan completes.
After a few minutes the scan was completed.
We can see indication shown us completed with
this symbol.
To access the scan results we can simply click the scan itself
and this will load the results for sunscreen.
We can see we can click on host. So
only one who saw scan, which is the
one seven two tt1 tte machine.
We can see the number of security vulnerabilities.
We can see base on
the categories. So whether it's critical how many
highs how many mediums how many
loose on how many informational to get more information on
the security vulnerability song we can simply click on
vulnerabilities here which indicates that
it discovered 43.
Once we click this we can see it is categorized base
on a severity. So for example, we can
filter this and see that they are mixed
security weaknesses. There's even critical
there are some mediums and most importantly
we can see the scoring system and their
name and their family. For example, let's
click on this one that says hi 7.5 unsupported
web server.
Once you click this, you can see the entire details unsupported web
server detection. We can see the actual description which
tells us exactly what is
the cause of the sea or why is it a security flow?
We can see the solution which is really amazing, which is
really great. So the solution tells us how we can
remediate this issue. I know we could resolve it. Additionally we
can see the output information that necesses was
able to retrieve we can see the port
that was scan and who's
looking more on the right hand side.
We can see the severity level the ID the
version of the scanner use we can even
see the risk information as it is defined by the common
vulnerability scoring system. We can
see the vectors and the metrics used to calculate
this particular score.
Let's say for example, we want to see various types
of remediations. We can click on the remediation tab.
I can see what the remediations are.
We can see the numbers security vulnerabilities here
and the host we can even see for example,
nessus has something called.
The VPR top threats, which
is their own version of their vulnerability
scoring system.
For instance we can see we have highs criticals we
have actually it is
not showing any medium sale, which is quite interesting but take
a look at some of these weaknesses. This one
has a severity score of 9.7 and
if we click on this name.
We can get specific details on it. So for example, this
here is a Microsoft security bulletin we
can see it was based on security update for
Microsoft Windows SMB server.
We get a synopsis the priority reading
we can see which devices will affected
during the scan if full description.
Solution and also additional referencing information
to help us resolve this problem
as soon as possible.
To generate a report we can simply click on report and
this will allow us to specify what type of
report and the format.
We can simply export this report in HTML PDF
or even a CSV file.
I'm Gonna Leave This 3 PDF.
For example, I'm going to select complete list of
vulnerabilities by host. I'm gonna
scroll down.
I can simply use this as a
default action. If not, I can simply select generate
report like so
this should take a few seconds to Pops a minute
to two to complete. Once the report is generated. You
can see it loads up within your web browser
or within your PDF
viewer. For example, it loads
on my web browser.
This report. I can simply scroll down. I
could see a table of contents screwing on
even further.
I could see a summary of all the results
or all the output or all of the security flaws
that was detected using nasus. This
report can even be customizable and as
as you can see here on the
reporting tool we can
simply specify what type of
information we would like to include for example, the
report Auto generated just a few
seconds ago was a complete list of all the security flows by
hosts. What if you want to generate a report base on
the vulnerability operations? Well, we can
generate another report and simply edit various details
as needed which makes this tool really really
amazing to use
In this video you have learned how to set up nasus using
Kali Linux. You have also learned how to perform your
first vulnerability scan using SS and
lastly we have taken a look at how you can generate reports
using the NSS tool.
In the next video, we will restarting section 4.
I hope this section has been informative for you
and I will see you in the next one.