Let's perform another vulnerability scan.
I want to perform an aggressive scan to find as many vulnerabilities as possible.
Go to college and start the Nessa's demon if it's not already started.
You service an SSD status to learn if it's running.
OK, so it's inactive, so I use service necessity, start to start Nessa's service.
Now go to your browser and connect to the Nessus interface.
It is a HTP service is running on the same machine, so I'll use one two seven zero zero one lookback
IP address referred to as localhost.
And the port of the Nessa's service is N3 for.
Sign in using your credential.
Click the new scan button.
Now let's choose advanced scan for this scan.
Will be more aggressive than a basic network scan.
So enter the basic info, give the scan and name and enter description if you want.
And the targets.
Here I have a Windows XP with an IP address of two zero seven and Métis voidable to Linux system with
an IP address of two zero six.
Here I have a third system, an up to date Windows eight, and it's IP addresses two to three.
Right, so back to Cali and enter the IP addresses of the target systems to zero six four meters, voidable
to zero seven for Windows XP and two to three for Windows eight.
Now click discovery and the list of the left.
So we're simply going to accept the default on this page, so let's click on Assessment over to the
left.
And on this page, we want to check perform thorough tests, so check the box.
Then move to the report section in the options on the left, you can override the normal verbosity,
make it report as much info as possible.
So next click, the advanced option in the left to the left, the only thing we're going to do here
is uncheck, enable safe checks.
Now, on a normal production network, you would leave this box checked, you don't want to take down
production systems when scanning, but for our purposes here, we want to gather as much information
as possible.
So we're going to want to check it.
Now click on the credentials tab.
Select the S.H. option.
In the list on the left.
Now, since we know the username and password for the portable to machine, we're going to put those
credentials in here.
Remember the username and password of both MSF admin?
James, the authentication method to password and put it in the username and password below.
Now in the plug ins tab.
We only need to activate the plug ins that have to do with what might be running on a Linux system so
we can disable a few things here.
OK, I paused demo here, I've got to make an apology, it's a late update while capturing the demo,
I forgot that I have Windows targets and disable the windows plug ins.
It's a mistake.
And I just wanted to show you that what we do here is if there's a problem, there's always a solution.
So if you have Windows targets, please do not disable the windows plug ins.
All right, let's move on.
We can finally click save at the bottom.
So here's the scan and we're ready to run it.
Simply click the great triangle at the far right of our skin, which stands for launching the scan.
And yes, the scan is started now, you can pause or stop the scan any time you want.
So click the scan and we see the results in real time.
OK, boy, that's going to take a while to run, so it's probably a good time to check your e-mail.
Grab a cup of coffee maybe, but just make sure you come back to review the results.