e6f0c93d-7453-4f01-8322-8733e995b8Nessus官网下载kali对应的Nessus版本
https://www.tenable.com/downloads/nessus?loginAttempt
使用dpkg安装
参考:sudo dpkg -i Nessus-10.1.2-debian6_amd64.deb
使用systemctl开启服务
sodo systemctl start nessusd.service
sudo systemctl start nessusd && systemctl --no-pager status nessusd
浏览器输入网址开启服务
https://127.0.0.1:8834
选择Managed Scanner
选择Tenable.sc
设置Nessus账号密码
安装完成后是这样的界面,尚未激活,不能扫描,此时只有一个设置按钮,并无扫描按钮.
![[IMG-20260516155635319.png]]
下载最新插件然后安装
sudo /opt/nessus/sbin/nessuscli update all-2.0_202201111911.tar.gz
注意安装完毕以后记录插件代码
![[IMG-20260516155635333.png]]
终端输入sudo vi /opt/nessus/var/nessus/plugin_feed_info.inc修改内容
PLUGIN_SET = "202209251459"; #不需要复制,但是注意将插件代码修改成上方的红框
PLUGIN_FEED = "ProfessionalFeed (Direct)";
PLUGIN_FEED_TRANSPORT = "Tenable Network Security Lightning";
chattr +i plugin_feed_info.inc 文件新增只读
chattr -R -i plugin_feed_info.inc 删除文件只读属性
lsattr plugin_feed_info.inc 查看文件属性
创建文件sudo mkdir /opt/nessus/var/nessus/plugins/
将plugin_feed_info.inc到新文件plugins中
sudo cp /opt/nessus/var/nessus/plugin_feed_info.inc /opt/nessus/var/nessus/plugins/
停止服务/bin/systemctl stop nessusd.service
启动服务/bin/systemctl start nessusd.service
打开Nessus网页等待配置完成
至此破解完成.
更新插件方法
systemctl stop nessusd.service
rm -rf /opt/nessus/var/nessus/plugins-code.db* 2&>/dev/null
rm -rf /opt/nessus/var/nessus/plugins-desc.db* 2&>/dev/null
rm -rf /opt/nessus/var/nessus/plugins-attributes.db 2&>/dev/null
rm -rf /opt/nessus/var/nessus/services* 2&>/dev/null
/opt/nessus/sbin/nessuscli update all-2.0_202209251459.tar.gz #记录升级号
sudo vi /opt/nessus/var/nessus/plugin_feed_info.inc #修改升级号升级包应该包含版本号
sudo cp /opt/nessus/var/nessus/plugin_feed_info.inc /opt/nessus/var/nessus/plugins/ #复制
systemctl start nessusd.service
删除Nessus方法,参考下面 https://www.wangan.com/docs/1466