1 00:00:00,330 --> 00:00:00,900 Welcome back. 2 00:00:01,260 --> 00:00:06,540 In this video, we're going to see how we can install a really useful tool for vulnerability analysis, 3 00:00:07,050 --> 00:00:10,420 probably one of the best tools to perform this process automatically. 4 00:00:11,010 --> 00:00:14,460 It is very easy to use and this tool is called Nessus. 5 00:00:15,820 --> 00:00:22,240 To get it running, we must first download and install it, so to do that, open up your Firefox. 6 00:00:25,600 --> 00:00:32,920 And in the search bar, we can type Nessus, if we scroll down to this tangible link that says Download 7 00:00:32,920 --> 00:00:35,680 Nessus vulnerability assessment, we can click on it. 8 00:00:36,460 --> 00:00:40,540 And right here, we're going to see two different versions of Nessus that we can download. 9 00:00:40,810 --> 00:00:45,280 We can get the free version that allows us to scan up to 16 IP addresses. 10 00:00:45,730 --> 00:00:50,440 And by the way, this Nessus essentials will only allow us to scan inside of the network. 11 00:00:50,650 --> 00:00:56,170 You will not be able to scan external IP addresses using this, however, you will get high speed, 12 00:00:56,320 --> 00:01:00,700 in-depth assessment, free training and guidance and support via community. 13 00:01:01,790 --> 00:01:07,250 Once you start performing, feel life penetration tests and you start scanning different companies, 14 00:01:07,250 --> 00:01:13,090 their networks and so on and so on, this Nessa's professional option will be really useful for you. 15 00:01:13,970 --> 00:01:14,970 It tells you right here. 16 00:01:15,080 --> 00:01:16,910 You get unlimited assessments. 17 00:01:16,910 --> 00:01:20,720 You can scan unlimited IP addresses, you can use it anywhere. 18 00:01:20,930 --> 00:01:24,470 You get live results, configuration assessments, bunch of different things. 19 00:01:24,830 --> 00:01:28,190 But it also comes with a really expensive price. 20 00:01:28,940 --> 00:01:33,620 However, this is something that pays off once you perform real life penetration tests. 21 00:01:36,290 --> 00:01:41,060 Right now, we are interested in the free version, so let us click download on the Net Essentials. 22 00:01:42,280 --> 00:01:48,430 So you can choose to register right here or what else we can do is we can type Nessa's download and 23 00:01:48,430 --> 00:01:50,770 download it straight away to our Linux. 24 00:01:51,310 --> 00:01:53,440 We can click right here, download more sustainable. 25 00:01:53,950 --> 00:01:57,340 And right here we are going to see different Nessus versions. 26 00:01:58,640 --> 00:02:05,750 In this case, since I'm running kalinich 64 bit, I'm interested in this, Nessa's DeBaun am the 64. 27 00:02:06,750 --> 00:02:07,680 If I click on it. 28 00:02:09,250 --> 00:02:09,870 I agree. 29 00:02:10,930 --> 00:02:17,230 If you ask me whether I want to open the file, I want to save it and it will download the file inside 30 00:02:17,230 --> 00:02:18,760 of my download directory. 31 00:02:20,030 --> 00:02:24,860 If you finish in just a few seconds, here it is, it is done, so let's click on this button right 32 00:02:24,860 --> 00:02:25,150 here. 33 00:02:25,160 --> 00:02:31,870 It will open our downloads directory and once it opens up, we can lower this page right here and open 34 00:02:31,880 --> 00:02:33,860 terminal inside of the downloads directory. 35 00:02:34,700 --> 00:02:43,760 To install this, we can run pseudo deep CGY, which stands for the package, and then Dashi, which 36 00:02:43,760 --> 00:02:47,660 stands for instant and we can type the name of the Knesset's. 37 00:02:47,780 --> 00:02:52,880 What you can do is you can just type capital N and then Tabit to to complete it. 38 00:02:53,930 --> 00:03:00,590 Then press enter, it will ask me for the password and put it right here and it will complete the installation 39 00:03:00,590 --> 00:03:01,480 process for us. 40 00:03:02,730 --> 00:03:07,800 Here it is, it finished in just a few seconds and it tells us right here that we can start NASA's scanner 41 00:03:07,920 --> 00:03:09,650 by typing this comment. 42 00:03:10,110 --> 00:03:12,060 So let's just keep it right here. 43 00:03:13,440 --> 00:03:16,260 Let's run it based ClipArt. 44 00:03:17,830 --> 00:03:22,270 Oh, we need to run it with user privileges so it's type pseudo and then paste the comment. 45 00:03:23,940 --> 00:03:31,290 And it will tell us starting Nessus now to go to Nessus, you need to copy this link right here. 46 00:03:33,160 --> 00:03:34,010 Kopitar link. 47 00:03:35,240 --> 00:03:41,690 Go to Firefox's, open another page, if we can close these two pages and we can paste and go to that 48 00:03:41,690 --> 00:03:41,990 link. 49 00:03:43,210 --> 00:03:47,290 Let me enlarge this and it will tell us potential security risk ahead. 50 00:03:47,720 --> 00:03:49,030 We don't really care about this. 51 00:03:49,060 --> 00:03:50,460 We know there is no risk right here. 52 00:03:50,470 --> 00:03:55,200 So click on Advanced and go down here, accept the risk and continue. 53 00:03:55,690 --> 00:03:56,350 Click on that. 54 00:03:57,910 --> 00:04:04,690 And this will start compiling plug ins, this will take a few seconds and soon it will ask us which 55 00:04:04,690 --> 00:04:06,400 version of Nessus we want to install. 56 00:04:07,240 --> 00:04:13,900 And we will also need to provide some additional information, such as email address and usernames and 57 00:04:13,900 --> 00:04:14,410 passwords. 58 00:04:15,740 --> 00:04:20,150 Here it is right here, specify NASA's essentials and click on Continue. 59 00:04:21,340 --> 00:04:26,920 Right here, you will need to provide the first name, the last name and the valid email address. 60 00:04:27,310 --> 00:04:31,660 Now, in case you don't use a valid one, you will not be able to use Nessa's because it will send you 61 00:04:31,660 --> 00:04:35,310 the activation code to the email address that you specify right here. 62 00:04:36,220 --> 00:04:39,370 Now, since they already have an account, just skip this. 63 00:04:40,300 --> 00:04:43,160 And I will go and type my activation code right here. 64 00:04:43,210 --> 00:04:49,210 You should get the same window and the same question asked as soon as you specify the email address 65 00:04:49,210 --> 00:04:54,970 and the first and last name, then you go to your email, find the activation code and typewritten right 66 00:04:54,970 --> 00:04:57,700 here once you type your activation code. 67 00:04:57,730 --> 00:05:00,480 We can continue username and password. 68 00:05:01,150 --> 00:05:05,680 I will set right here, Mr. Hacker, which is my username, and I will type in my password. 69 00:05:05,980 --> 00:05:09,700 It will ask you to set up your own username and to set up your own password. 70 00:05:09,700 --> 00:05:12,130 You can use whatever you want after it. 71 00:05:12,280 --> 00:05:13,090 Click on Submit. 72 00:05:14,480 --> 00:05:20,810 It will tell me Saturday's complete and now it will start the true preparation for this process right 73 00:05:20,810 --> 00:05:27,640 here will take some time and by some time, I think it might take even up to 30 or 40 minutes. 74 00:05:28,860 --> 00:05:34,440 So just take a small break until all of this is over and we're going to continue witnesses in the next 75 00:05:34,440 --> 00:05:34,740 video.