Nessus Vulnerability Scanner

Yintoni?:

I-Nessus inokufumaneka ngokukhululekile, i-source-open source vulnerable scanner.

Kutheni usebenzisa iNessus ?:

Amandla kunye nokusebenza kwe-Nessus, idibaniswe nexabiso-AMAHLA-yenza kube yinto ephosakeleyo yokumelana nomnxeba.

I-Nessus ayenzi nantoni na malunga naziphi iinkonzo eziqhubayo kwiindawo eziphathekayo kwaye zizama ukuzisebenzisela ubunzima kunokuba zithelekise iinombolo zeenguqu zeenkonzo ezisebenzayo.

Ziziphi iimfuno zeNkqubo ?:

Icandelo le-Server yeNessus lifuna inkqubo ye-POSIX njenge-FreeBSD, i-GNU / Linux, i-NetBSD okanye i-Solaris.

Icandelo leKlayenti leNessus lifumaneka kuzo zonke iifayile ze Linux / Unix. Kukho kwakhona umsebenzisi we-Win32 GUI osebenza naluphi na uhlobo lwe-Microsoft Windows.

Izixhobo zeNessus:

I-database ye-Nessus engozini ihlaziywa imihla ngemihla. Nangona kunjalo, ngenxa yokumodareka kweNessus kunokwenzeka ukuba udale iiplagi zakho ezizodwa ukuvavanya. I-Nessus ibuye ihlakaniphe ngokwaneleyo ukuvavanya iinkonzo ezisebenza kwiichweba ezingaqhelekanga, okanye ukuvavanya iziganeko ezininzi zesevisi (umzekelo ukuba uqhuba iseva ye-HTTP kwii-port 80 kunye ne-port 8080). Uluhlu olupheleleyo lweempawu qhosha apha: Iimpawu zeNessus.

Iifowuni zeNessus:

Kukho ininzi yeeplagi ezingasetyenziselwa ngokubambisana neNessus ukubonelela ngokunyusa ukusebenza kunye nokunika ingxelo. Uyakwazi ukubona iiplagi ezifumanekayo apha: Iiplagi zeNessus

Snapshot yeNessus:

Ndalanda inxalenye yeNcedus Server kwaye ndazama ukuyifaka- isitayela se-Linux. Akukho fayile ye-EXE ocofa kabini. Kufuneka uqulunqe ikhowudi kuqala uze usebenze ukufakwa. Kukho imiyalelo epheleleyo ekhoyo kwisiza seNessus.

Ndagijimela kwi-glitch. Ndaxelelwa ukuba kufuneka ndifake "i-sharutils" ukwenzela ukuba ukufakela ukusebenza. Akungumntu omkhulu weLuxux ndaphendukela kwelinye lamadoda aseAntiline.com ukuba ndifumane uncedo. Ngolunye uncedo oluvela kuSonny Discini, iNjineli yoNxibelelwano lweNethiwekhi yoKhuseleko kuMasipala waseMontgomery County (aka ihorse13), ndakwazi ukufumana ikhowudi iqulunqwe, ifakwe kwaye ikulungele ukuqhuba kumshini wam Redhat Linux.

Emva koko ndafaka i-Win32 GUI Nessus Client kwicandelo lomshini weWindows XP Pro. Le nkqubo yokufakela yayincinci "ngokuthe ngqo-phambili" kumntu owaziyo kwiWindows.

I-Nessus ikunika ezininzi iinketho xa kuziwa ekusebenziseni ukutshintshisa kwangoku. Unokwazi ukuskena iikhompyutheni nganye, udidi lwee-intanethi ze-IP okanye ii-subnet ezipheleleyo. Unokuvavanya ngokuqokelela yonke iqoqo yeeplagi ezikhuselekileyo ezingaphezu kwe-1200, okanye ungacacisa umntu okanye isethi yokukhubazeka okuthe ngqo ukuvavanya.

Ngokungafani neminye imithombo evulekileyo kunye nabashenyi bokungabikho kwintengiso, i-Nessus ayicingi ukuba iinkonzo eziqhelekileyo ziya kusebenza kwiichweba eziqhelekileyo. Ukuba uqhuba isevisi ye-HTTP kwi-port 8000 kuya kufumana ubunzima kunokuba ucinge ukuba kufuneka ufumane i-HTTP kwi-port 80. Kwakhona ayihlolisanga inani lencwadana yeenkonzo eziqhubayo kwaye kuthathwa ukuba inkqubo iyingozi. I-Nessus izama ukuzama ukuxhatshaza ukukhubazeka.

Ngenxa yezixhobo ezinamandla nezibanzi ezifumanekayo kumahhala, kunzima ukwenza ityala lokuchitha iwaka okanye amashumi amawaka eedola ukuphumeza umkhiqizo wokukhangela ubungozi. Ukuba usemarikeni-ngokuqinisekileyo ndincoma ukuba ungeze iNessus kwiluhlu olufutshane lweemveliso ukuvavanya kwaye ucinge.

Inqaku loMhleli: Le ngcaciso yelifa elimalunga neNessus. U-Nessis ngoku unikezelwa njengeNessus Home, uNessus Professional, uMphathi weNessus kunye neNessus Cloud. Unokuqhathanisa le mveliso kwiPowerable's Nessus Page.

(Ehleliwe nguAndy O'Donnell)