How To Run a Nessus Server

First of Al U need A Knoppix Distro. More U just have to follow The Steps:-

Boot up Knoppix STD. The install files can be found on the enclosed CD or can be downloaded from www.knoppix-std.org.

Open a terminal window and make sure that you are running as root. If not, type su.

You will need to add a user to the Nessus server. This can be accomplished by typing Nessus-adduser from the prompt.

After a user is added, you will want to start the Nessus server daemon by typing in the following: /etc/init.d/nessusd start.

Once the daemon is started, you can type nessus at the command line to start the Nessus client. You will now be prompted to log in to Nessus. Enter the username and password you created in step 3.

Click OK on the warning page that warns about dangerous plugins. This message basically states that some plugins can cause some servers to crash or hang. If you were to run this tool on a production network, this is something you would want to discuss with management before making a decision on how to proceed.

Browse through the parameters available on each tab. These include: Plugins, Prefs, Scan Options, Target Selection, and User.

Under the Network tab, enter the target device you would like to scan. Make sure that this is a system you have permission to perform a scan on. Start the assessment by clicking on Start the Scan.

On the Get Updates Setup Files page, select Yes, download the updated Setup files (Recommended), and then click Next. You'll need to register to get updates. Updates are seven days behind for non-paying customers.

After the scan is finished, review the results. This information could be added to your test report had this been an actual test.

The next step of a real assessment would be to patch, harden, and update the systems that were found to be vulnerable.