Instalação do Nessus

O Nessus já tem pacote pré­compilado para CentOS. Instale, se tudo correr bem, terá um resultado igual ao abaixo:

# rpm -ivh Nessus­3.2.0­es3.i386.rpm
Preparing...           ########################################### [100%]
   1:Nessus            ########################################### [100%]
nessusd (Nessus) 3.2.0 for Linux
(C) 1998 ­ 2008 Tenable Network Security, Inc.
Processing the Nessus plugins...
[##################################################]
All plugins loaded
­ Please run /opt/nessus/sbin/nessus­adduser to add an admin user
­ Register your Nessus scanner at http://www.nessus.org/register/ to
  obtain all the newest plugins
­ You can start nessusd by typing /sbin/service nessusd start

Adicionando usuários do Nessus

Agora que já instalamos, precisamos criar um usuário administrador para o Nessus. O Nessus possui regras, portanto podem ser criados múltiplos usuários com perfis diferentes.

# /opt/nessus/sbin/nessus­adduser
Using /var/tmp as a temporary file holder
Add a new nessusd user
­­­­­­­­­­­­­­­­­­­­
Login : admin
Authentication (pass/cert) [pass]: pass
Login password: ********
Login password (again): ********
User rules
­­­­­­­­­­
nessusd has a rules system which allows you to restrict the hosts
that admin has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus­adduser(8) man page for the rules syntax
Enter the rules for this user, and hit ctrl­D once you are done:
(the user can have an empty rules set)
Login             : admin
Password          : ********
DN                :
Rules             :
Is that ok ? (y/n) [y]
user added.

Digamos que seja preciso criar um usuário que consiga fazer um "scan" em apenas uma rede 10.0.0.0/24.

# /opt/nessus/sbin/nessus­adduser
Using /var/tmp as a temporary file holder
Add a new nessusd user
­­­­­­­­­­­­­­­­­­­­
Login : internaluser
Authentication (pass/cert) [pass]: pass
Login password: ********
Login password (again): ********
User rules
­­­­­­­­­­
nessusd has a rules system which allows you to restrict the hosts
that restricteduser has the right to test. For instance, you may want
him to be able to scan his own host only.
Please see the nessus­adduser(8) man page for the rules syntax
Enter the rules for this user, and hit ctrl­D once you are done:
(the user can have an empty rules set)
accept 10.0.0.0/24
default deny
Login             : internaluser
Password          : ********
DN                :
Rules             :
accept 10.0.0.0/24
default deny
Is that ok ? (y/n) [y]
User added.

Para maiores definições sobre as regras e como aplicá­las, utilize o manual do script nessus­adduser.

# export MANPATH=/opt/nessus/man
# man nessus­adduser