首先到nessue官网现在nessus的rpm包
然后:
[arm@acer linux_soft]$ sudo rpm -ihv Nessus-5.2.4-es6.i386.rpm
[sudo] password for arm:
warning: Nessus-5.2.4-es6.i386.rpm: Header V4 RSA/SHA1 Signature, key ID 1c0c4a5d: NOKEY
Preparing... ########################################### [100%]
1:Nessus ########################################### [100%]
nessusd (Nessus) 5.2.4 [build N25016] for Linux
Copyright (C) 1998 - 2013 Tenable Network Security, Inc
Processing the Nessus plugins...
[##################################################]
All plugins loaded
- You can start nessusd by typing /sbin/service nessusd start
- Then go to https://acer:8834/ to configure your scanner
修改环境变量
sudo vim /etc/profile
添加:
PATH=$PATH:/opt/nessus/bin:/opt/nessus/sbin
source /etc/profile
添加一个帐号
nessus-adduser
Login : arm
Login password :
Login password (again) :
Do you want this user to be a Nessus 'admin' user ? (can upload plugins, etc...) (y/n) [n]: y
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that arm has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser manual for the rules syntax
Enter the rules for this user, and enter a BLANK LINE once you are done :
(the user can have an empty rules set)
Login : arm
Password : ***********
This user will have 'admin' privileges within the Nessus server
Rules :
Is that ok ? (y/n) [y] y
User added
在我们添加了一个名为“arm”的管理员帐号,然后打开 http://www.nessus.org/products/nessus/nessus-plugins/obtain-an-activation-code 获取一个激活码。选择“Using Nessus at Home”,然后输入你的first name、last name、E-Mail之后,去你的邮箱看看,你会收到一封名为《Nessus Plugin Feed》的邮件。下面会有这样一行:
Your activation code for the Nessus HomeFeed is XXXX-XXXX-XXXX-XXXX-XXXX
这个就是你的激活码了,在CentOS下面输入:
nessus-fetch --register 2F6B-7A98-91CC-DD53-BA09
Your Activation Code has been registered properly - thank you.
Now fetching the newest plugin set from plugins.nessus.org...
可能需要等待很长时间。完成以后
service nessusd star
打开浏览器:https://your ipaddress:8834 一定要记住是https哦
注意:火狐浏览器第一次浏览可能会阻止你,点击信任即可。