Once this is done, we then need to enable the Nessus service by typing the following command: Then, type the following into your terminal to unpack the tool: Once this is downloaded, navigate to your downloads folder and type the following: If they match, we can continue to our next task. Sha256sum Nessus-8.13.2-debian6_bĬompare the calculated result with original hash value. Open a Kali terminal screen, locate the downloaded file, then type this command: Now, we will calculate and check integrity of the downloaded file against the checksum which is displayed on the web page. Click the Checksum link on the right hand and copy and paste the SHA256 string someware. The numbers may change as the version of nessus is updated, the important point is that you download the. We are installing the tool on Kali, so we want to pick the version called: Once this is done, you will be redirected to theĭownload page for Nessus Essentials, which is the free version. To install Nessus, we will have to visit their site and first register for an activation code at the following link:Įnter your name and email here to receive the code.

Task 2:įirst, put the Kali VM temporarily on “Bridged Network”, as we will download Nessus tool from the internet.

When login is required, you will enter “ msfadmin” as username and password. Remember to put both machines on the same isolated host-only network to talk to each other. We will use both Kali Linux and Metasploitable VM for this lab. You can find a lot of material on this page on how to download and setup the Metasploitable VM. You can download the metasploitable iso file here: If you are unfamiliar with metasploitable, it is an intentionally vulnerable machine which can be loaded in VMware, the same as Kali Linux. You can use Kali Linux in a VM for this lab. The tool allows security professionals to perform high-speed asset discovery, target profiling, configuration auditing, malware detection, sensitive data discovery, and more. Nessus is a proprietary vulnerability scanner developed by Tenable Inc. Learn how to run a comprehensive vulnerability scan with Nessus.

How to use nessus scan website