今天在网上看到这么个关于主机安全检测的工具nessus,然后就在本地测试服务器进行了安装以及测试,下面写出安装以及测试的一个过程.
1.安装nessus的安装
nessus的安装其实很简单,到 www.nessus.org去下载相应的版本,他支持3个操作:windows,linux,mac.
我这里安装的是Nessus-4.0.1-suse10.0.i586.rpm,安装如下:
#rpm -ivh Nessus-4.0.1-suse10.0.i586.rpm
他默认安装到了/opt/nessus/下面,进入这个目录去看看
#ls
bin com etc lib man sbin share var
bin com etc lib man sbin share var
2.添加nessus的用户
#/opt/nessus/sbin/nessus-adduser
下面红色字的是需要输入的
Login :
test //登录用户
Authentication (pass/cert) : [pass] pass //验证方式,有密码和授权文件,这里选择密码
Login password : //这里需要输入用户的密码
Login password (again) : //这里需要再输入用户的密码
Do you want this user to be a Nessus 'admin' user ? (can upload plugins, etc...) (y/n) [n]: y //这里提问你是否让test用户作为管理者,我这里选择是
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that test has the right to test. For instance, you may want
him to be able to scan his own host only.
Authentication (pass/cert) : [pass] pass //验证方式,有密码和授权文件,这里选择密码
Login password : //这里需要输入用户的密码
Login password (again) : //这里需要再输入用户的密码
Do you want this user to be a Nessus 'admin' user ? (can upload plugins, etc...) (y/n) [n]: y //这里提问你是否让test用户作为管理者,我这里选择是
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that test has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus-adduser manual for the rules syntax
Enter the rules for this user, and enter a BLANK LINE once you are done :
(the user can have an empty rules set)
(the user can have an empty rules set)
Login : test
Password : ***********
This user will have 'admin' privileges within the Nessus server
Rules :
Is that ok ? (y/n) [y] y //这里让确定上面的相应操作
User added
Password : ***********
This user will have 'admin' privileges within the Nessus server
Rules :
Is that ok ? (y/n) [y] y //这里让确定上面的相应操作
User added
这样我们的用户就建立好了,现在我们启动nessus,
# service nessusd start
Starting the Nessus Daemon done
linux-0fdr:/opt/nessus/etc/nessus # Missing plugins. Attempting a plugin update...
Your installation is missing plugins. Please register and try again.
To register, please visit http://www.nessus.org/register/
Starting the Nessus Daemon done
linux-0fdr:/opt/nessus/etc/nessus # Missing plugins. Attempting a plugin update...
Your installation is missing plugins. Please register and try again.
To register, please visit http://www.nessus.org/register/
看到第一次启动这里提示我们没有注册所以启动之后你会发现没有没有nessus的进程生成,看来只能去注册了.去他给指定的页面去进行注册,只需要提供一个邮箱地址就行了,然后他会向你的邮箱发送一份邮件,打开邮件发现他给了注册号,也说了如何注册的,注册方法如下:
#/opt/nessus/bin/nessus-fetch --register
1AE3-5756-E215-5CD7-4E3E
//后面这一串就是注
册码了,这里说明
下注册的时候需要一段时间的.
然后再来启动一次nessus,看看什么情况
#service nessusd start
Starting the Nessus Daemon done
Starting the Nessus Daemon done
OK,现在启动一切正常了,我们来看看端口和进程有没有启动.
# ps -ed |grep nessus
24003 ? 00:00:00 nessus-service
24004 pts/14 00:00:47 nessusd
24003 ? 00:00:00 nessus-service
24004 pts/14 00:00:47 nessusd
# netstat -ant |grep 1241
tcp 0 0 0.0.0.0:1241 0.0.0.0:* LISTEN
tcp 0 0 :::1241 :::* LISTEN
tcp 0 0 0.0.0.0:1241 0.0.0.0:* LISTEN
tcp 0 0 :::1241 :::* LISTEN
看到了进程以及端口都已经OK了,看来一切正常了,服务端已经OK了,现在在客户机上进行安装,以检测服务端的机器是否安全,我这里客户端安装在Windows操作系统下面.
我这里下载的是Nessus-4.0.1-i386.mis的安装包,安装不用说了,一路next.安装好以后打开客户端程序,然后我们点击下面的conect按钮,然后点击Edit安装,会出现一个窗口,要在里面输入连接的名字,连接机器的IP、端口号、用户以及密码,填好之后点击save,返回上一级的窗体,然后点击connect安装,然后他就进行了服务器的连接,第一次连接提示是否继续登录,当然点“是”了,连接成功之后,需要我们提供检测的服务器IP,这里可以选择一个网段或者单独的一个IP,这里选择一个IP,然后选择添加我们的扫描规则,添加完之后,点击下面的scan now,ok看到已经再扫描了,扫描之后会出一个报告,这里可以导出为html,非常方便.