ubuntu20.04部署Nessus pro 10.5.0

下载nessus

# curl --request GET --url 'https://www.tenable.com/downloads/api/v2/pages/nessus/files/Nessus-10.5.0-ubuntu1404_amd64.deb' --output 'Nessus-10.5.0-ubuntu1404_amd64.deb'

安装nessus

# dpkg -i Nessus-10.5.0-ubuntu1404_amd64.deb

运行nessus

# systemctl start nessusd

设置nessus

https://<remote IP address>:8834 

获取离线包

获取Challenge code

# /opt/nessus/sbin/nessuscli fetch --challenge

Challenge code: f93186bbe12578485c091a5f364645e4b7c95bdb

You can copy the challenge code above and paste it alongside your
Activation Code at:
https://plugins.nessus.org/v2/offline.php

获取临时邮箱

https://10minutemail.info/

获取激活码

https://www.tenable.com/products/nessus/nessus-essentials

 

查看激活码

获取插件包

https://plugins.nessus.org/v2/offline.php

离线注册

停止nessus

# systemctl stop nessusd

离线注册

# /opt/nessus/sbin/nessuscli fetch --register-offline /opt/nessus/nessus.license
Your Activation Code has been registered properly - thank you.

离线更新插件

# /opt/nessus/sbin/nessuscli update /opt/nessus/all-2.0.tar.gz

[info] Copying templates version 202302271406 to /opt/nessus/var/nessus/templates/tmp
[info] Finished copying templates.
[info] Moved new templates with version 202302271406 from plugins dir.
[info] Moved new pendo client with version 21691 from plugins dir.
 * Update successful.  The changes will be automatically processed by Nessus.

设置目录权限

plugins

# find /opt/nessus/lib/nessus/plugins/ -name "*.*" | xargs -i chattr +i {}    #设置plugins全文件只读

plugin_feed_info.inc

# chattr -i /opt/nessus/lib/nessus/plugins/plugin_feed_info.inc #取消inc文件的只读

plugin_feed_info.inc

/opt/nessus/lib/nessus/plugins/plugin_feed_info.inc

查看插件信息

# cat /opt/nessus/lib/nessus/plugins/plugin_feed_info.inc
PLUGIN_SET = "202303040556";
PLUGIN_FEED = "HomeFeed (Non-commercial use only)";

修改插件信息

# vim /opt/nessus/lib/nessus/plugins/plugin_feed_info.inc

PLUGIN_SET = "202303040556";
PLUGIN_FEED = "ProfessionalFeed (Direct)";
PLUGIN_FEED_TRANSPORT = "Tenable Network Security Lightning";

 /opt/nessus/var/nessus/plugin_feed_info.inc

修改插件信息

# vim /opt/nessus/var/nessus/plugin_feed_info.inc

PLUGIN_SET = "202303040556";
PLUGIN_FEED = "ProfessionalFeed (Direct)";
PLUGIN_FEED_TRANSPORT = "Tenable Network Security Lightning";

设置plugin_feed_info.inc文件权限

# chattr +i /opt/nessus/var/nessus/plugin_feed_info.inc #设置只读

复制文件plugin_feed_info.inc

# mkdir /opt/nessus/var/nessus/plugins
# cp /opt/nessus/var/nessus/plugin_feed_info.inc /opt/nessus/var/nessus/plugins

开启服务

# systemctl start nessusd.service

访问nessus dashboard

此过程需要等待好几个小时。。。。

参考文档

https://www.freebuf.com/sectool/348481.html