# Nessus Vulnerability Management Lab

Today, we are going to see, how one can setup and practice vulnerabilty assessment on their own system. For this, we will be using [***Nessus***](https://www.tenable.com/products/nessus) from \*\*t*enable.*\*\*

When one visits the official [*website*](https://www.tenable.com/products/nessus), there one can see that it has three versions:

* **Essentials**
    
* **Professionals**
    
* **Expert**
    

For our lab, we will be using ***Nessus essentials***, as it is the free version. One can also try other versions (*if they wish to*).

I will be using my ***Kali Linux*** as the host to setup Nessus on. One can also use other OS like Windows or Mac.

So in kali, we will go to the [***download page***](https://www.tenable.com/products/nessus/nessus-essentials?x-clickref=FUZZ) where one needs to enter some details along with the email id, in order to recieve the free **registration key.**

Once entered, you will be redirected to the download page, where one can download the file for their system.

> They also have an option to download the *iso file* and set it up as a separate machine. But we will stick to the software file for our kali linux.

Once downloaded, now its time to switch to our terminal and install the downloaded file.

There one can install it by:

```bash
cd /Downloads
dpkg -i <pkg_name>
```

As I have downloaded it in my *Downloads* directory, so I navigated to that directory and there I used *dpkg* to install.  
Once installed, it will show:

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701934405504/ef083712-e216-417f-b10d-b2b87faa6016.png align="center")

After running the specified cmd, one needs to visit [***https://kali:8834/***](https://kali:8834/) . There it may prompt the **Warning page:**

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701934292360/9a0fb591-06a3-4195-9c5f-71d718f04d33.png align="center")

Ignore it and proceed ahead.

We will use the ***essentials*** version with the ***registration key*** we got earlier.  
Once it completes downloading, it will bring you to the dashboard:

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701934457499/b3f73135-15c2-4dc8-bcac-1b6fec2ac246.png align="center")

Since, we have done a fresh installation, so we have nothing here.

Its time to create our first scan.  
At the right most corner, it has an option of ***New Scan*** where we will create our first scan.

It has many different scan options:

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701935737949/7959a618-b840-4dba-9a2e-ece88d5449f2.png align="center")

For this article, we will proceed with a ***Basic Network Scan.***

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701935812600/bbeb7211-f12f-47d8-be0e-ed11774b84f1.png align="center")

I have already setup an intentionally vulnerable machine for testing purpose named **kioptrix.** It is an old, basic CTF machine having vulnerabilities.

So, we gave the name to our scan and provided the ***target IP*** to scan for.  
One can configure a lot more options, but for this demo, we will keep all other things at their default state and save the configurations.

Once the save is confirmed, then one needs to start the scan and it will scan the target IP for the possible vulnerabilities.

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701935858008/0a2151d7-5864-4bbd-9287-3f2bd7cd78c8.png align="center")

In the right corner, it indicates the findings. It will take some time to scan.

Once the scan is completed, it will show the outputs:

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701935901405/0815a3e7-7199-44eb-b5fa-929e569b50d9.png align="center")

As one can clearly see that Nessus has detected vulnerabities and divided it according to the [***cvss score***](https://www.cvedetails.com/cvss-score-distribution.php).  
On opening further, one can get the details of the vulnerability detected:

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701935976363/ea58ffd0-633e-4cca-806d-5ab0a44fbb59.png align="center")

We can see that Nessus has detected ***multiple Https*** based issues in the version of *Apache* installed.

On getting further inside:

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701936018646/04799fdc-a990-4830-aa4f-230a1f2f1dcf.png align="center")

It has proper description about the detected vulnerability along with the possible ***remediation steps***.

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701936144634/50a661f7-4590-497d-a9da-e8b474c5c8f6.png align="center")

In the right corner, it has the Risk Information where it lists the CVSS information for further references.

In this way, one can scan the target machines and go through the various possible scan options for the target (according to one’s requirements).

> **Note**: The essential version has limitations for the number of the targets which can be scanned for free.
> 
> One can easily bypass this by making another account using [***temp mail***](https://temp-mail.org/en/).

Nessus has lot more functionalities, like one can export the scan results and then integrate it into other tools.  
Whatever demonstrated here is just the tip of iceberg. A lot more is there to be explored.

So this was the lab which one can easily setup on their own system and practice vulnerability scanning.  
Hope you got to learn something from this article. Follow for more such learnings!