Nessus: Malware and Vulnerability Assessment

Learn how security scanners search networks for security holes using port scanning, including SYN scan and UDP scan, and balance breadth, depth, and customization to reduce false positives.

Explore Nessus, a free open source security scanner for port scanning, information gathering, and vulnerability assessment, with real-time web-based management and centralized distributed scanning.

Install Nessus by downloading the Genesis installer, register with the activation code, install on Windows or Linux, configure the scanner, and begin IP and agent scanning of your environment.

Explain how Nessus uses policies, plugins, and rules to define scans, manage scanners, and apply updates, while detailing master password safety and scan workflow.

Learn to create a policy template for a basic network scan in Nessus, configuring settings, discovery, assessment, and report, and selecting credentials and plugins.

Learn to create an advanced Nessus scan policy, select plugins and credentials, and configure discovery and port scanning options to assess vulnerabilities.

Learn to create and apply user-defined policies for scanning vulnerabilities with Nessus, comparing basic and advanced scans, configuring plugins, credentials, targets, scheduling, and notifications.

Export and import policy templates in nessus to share configurations across systems, using the export and import options to move templates between setups.

Modify or configure an existing policy and create a copy to streamline scanning, adjusting settings, credentials, and plugins, then tailor the backdoor policy with specific discovery, credentials, and ping options.

Explore how plugins in Nessus detect vulnerabilities, how plugin rules shape remediation actions, risk scores, and security posture reporting, including time-bound and host-specific controls.

Create and organize scan targets by using folders, naming conventions, and moving or copying targets between folders to manage multiple client scans efficiently in Nessus.

Learn how to set up a Nessus vulnerability scan by selecting and customizing a basic network scan policy. Configure targets, credentials, and plugins to identify vulnerabilities.

Assess target vulnerabilities with Nessus by evaluating severities, identifying end-of-life Unix risks, and recommending upgrades, while mitigating medium issues such as disabling track and trace methods.

Learn to create and configure a web application scan policy in Nessus, set targets, run a web application test scan, and analyze results to generate a report.

Create and configure a Nessus WAT policy, choose scan modes from all to complex, configure credential settings, and review plugin families such as CGI abuse and web server checks.

Configure and apply user defined policies in Nessus to tailor vulnerability assessments, export and reuse templates, build targeted web application scans, and schedule scans with time zone awareness.

Launch and monitor a Nessus web application vulnerability scan, review severity distributions from information to critical, analyze plugin families and Apache Tomcat findings to interpret results.

Learn to manage Nessus reports by configuring policies and targets, analyzing vulnerabilities by severity, and exporting customized client reports in various formats.