最近,因科研需要,学习Nessus。
Nessus是一款优秀的漏洞扫描软件,在其v6 HOME版本中在线更新漏洞插件不成功,采用离线更新,成功地更新了插件,在此将更新方法进行分享。
1、Nessus软件安装包的下载
http://www.tenable.com/products/nessus/select-your-operating-system
这里,依据自己机器而定,64位还是32位的kali debain系统。
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQxMjQzMDQtNTc1OTc0MzUwLnBuZw==.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQxNDI2NDctODU1NzQ0MDUucG5n.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQyMTA3MTAtNjUzNzI3MTcwLnBuZw==.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQyMjQxMTYtODEzMzk1ODE4LnBuZw==.png)
2、初步安装
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQzMjA4OTctMTI4MDQzOTAyNC5wbmc=.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQzNTExNzktMTE0MTk3OTQwNy5wbmc=.png)
3、安装完成后使用命令 /etc/init.d/nessusd start 进行启动
root@kali:~# /etc/init.d/nessusd start
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQ1MDE4MTktMTQyNDUwMjEyLnBuZw==.png)
在这里,如是按照一些旧老版本的安装步骤,是行不通的。
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQ4NDI3NTctODE2NTA2NjE4LnBuZw==.png)
会看到,是没有对应的目录。所以,Nessus在安装的时候,要特别注意,看官网走。新旧版本是不一样的。不分32位和64位。这是我已经走过的弯路,望大家避让。
https://docs.tenable.com/nessus/6_6/Content/2_Getting_Started/Offline_Update.htm (官网)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzUwMjA0NzYtMTk2NzgzNTYzNC5wbmc=.png)
4、先注册,并获取激活码
www.nessus.org/products/nessus/nessus-plugins/obtain-an-activation-code
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQ2MjMzNjYtMTQ3MzgwNzY5OC5wbmc=.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQ2MzcwMDctMTEyMzE2MzczMy5wbmc=.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQ3MTAwNjktMTA5NTA2OTg4Mi5wbmc=.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzQ3MjI3ODgtMTE1NDA3Nzg4Mi5wbmc=.png)
建议使用163,gmail等),注册完成会收到邮件,邮件中就有Active code。
5、执行如下命令,获得挑战码
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzU0MzI5NDQtMTQ1NTQwMDI4MS5wbmc=.png)
6、提交注册码和挑战码
https://plugins.nessus.org/offline.php
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzU3MDcwNjktOTE3MjA4MTM5LnBuZw==.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzM3NTIyNDEtOTA5NjczMzkxLnBuZw==.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzM4MzcyODgtMTY1MTI0MjM4OC5wbmc=.png)
7、离线注册
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzU4MDYyMTAtMTMxMzkwOTgwOS5wbmc=.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzU4NDE4MDQtMjA2MzU2OTU5Ny5wbmc=.png)
注意,自己cp过去,我之前下载的目录是在/root/下载/下, 自行去复制到/opt/nessus/etc/nessus
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxNzU5MjcyMjYtMTkwODU0NzgzMC5wbmc=.png)
8、获取最新插件
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDUxODAwNTAyMjYtMTM5NzE0NDU1OS5wbmc=.png)
![](https://www.codeprj.com/image/aHR0cHM6Ly9pbWFnZXMyMDE1LmNuYmxvZ3MuY29tL2Jsb2cvODU1OTU5LzIwMTYxMi84NTU5NTktMjAxNjEyMDYwOTU0MTc5NDQtNTc4MjE2MjY5LnBuZw==.png)
/opt/nessus/sbin/nessuscli update all-2.0.tar.gz
参考博客:
http://www.kali.org.cn/forum.php?mod=viewthread&action=printable&tid=22551
http://blog.csdn.net/ling_xiao007/article/details/50670441
|