In the subsequent pages you can request an activation code if you already don’t have one and create an account by filling in your details. Now, the initial set up page loads up, tick the corresponding product of your choice. Browse to the given location Your browser might issue a SEC_ERROR_UNKNOWN_ISSUER error because the Certification Authority is not a trusted valid certificate authority and that’s okay. Now, the service is running by default on port 8834. Start Nessus by typing /bin/systemctl start rvice Select Metasploitable VM as a target victim from this list. Be sure your Kali VM is in Host-only Network before starting the scan, so you can communicate with your target Metasploitable VM. Unpack and install the file with one command: To begin, Nessus wants us to input a range of IP addresses so that we can discover some targets to scan. After downloading the archive, browse to the location of download. There are multiple versions to choose from, I will be using the 64-bit Debian version. Then, register for a free account for Nessus Essentials in order to recieve your activation code. Sudo apt update & sudo apt full upgrade -y The next thing we want to do is to install OpenVAS.First, make sure your system has the latest updates. This will update your repository and upgrade your Kali, the -y at the end saves you a press of the button “Y” in the process. Sudo apt update & sudo apt upgrade -y Code language: Bash ( bash ) The first thing we want to do is to make sure that our Kali installation is up-to-date. So without further ado, let’s dive right into the installation.

I also found it very intuitive to work with. The -t (timeout) flag is completely optional, and lets you provice the max time to wait when trying to render and screenshot a web page. It will auto detect the file you give it with the -f flag as either being a text file with URLs on each new line, nmap xml output, or nessus xml output.

Of course, tools like Nessus and NeXpose are more feature-rich, but they come with a high price tag too.įor starters, OpenVAS is simply perfect and gives you a good idea of how a vulnerability scanner works. EyeWitness is designed to run on Kali Linux. I personally used this software in many different kinds of assessments and was always satisfied with the results I got (keeping in mind that it is completely free). OpenVAS is also under the GNU General Public License (GPL).

OpenVAS started under the name of GNessUs, a fork of the previously open-source Nessus scanning tool (which costs you money now). OpenVAS is an open-source vulnerability scanner.

Run nessus on kali