Teach on Udemy

Turn what you know into an opportunity and reach millions around the world.

Learn More

Your cart is empty.

Keep shopping

Practical Nessus Vulnerability Scanning

Name: Practical Nessus Vulnerability Scanning
Rating: 4.4 (313 reviews)

Master Nessus Scanning Techniques with Real Labs and Step-by-Step Tutorials

Created byAhmad Ali

Last updated 11/2025

English

What you'll learn

Understand the fundamentals of vulnerability management
Install and configure Nessus on Windows and Linux
Explore Nessus product editions, licensing, and user interface.
Perform basic and advanced vulnerability scans using pre-built and custom scan templates.
Understand and use scan policies, credentials, and plugin configurations effectively.
Conduct authenticated and unauthenticated scans.
Analyze scan results, generate detailed reports, and interpret vulnerability severity.
Simulate real attacks by scanning vulnerable machines in a lab environment.
Use Nessus for compliance checking.
Create and manage scan policies, credentials, and plugin settings.

Course content

11 sections • 55 lectures • 7h 23m total length

Course Introduction3:48
Master Nessus vulnerability scanning for penetration testing by building a real-world lab, performing credential and non-credential scans, and generating professional remediation and compliance audit reports.
Overview of Vulnerability9:03
Explain how vulnerabilities are weaknesses in configurations that attackers exploit to threaten confidentiality, integrity, and availability, with examples like software bugs, misconfigurations, outdated software, weak credentials, and open ports.
Vulnerability Management6:31
Learn how vulnerability management identifies and remediates weaknesses with Nessus scans. Prioritize critical issues, apply patches, and update configurations to keep networks secure.
Vulnerability Management Lifecycle12:25
Drive risk reduction by continuously managing vulnerabilities through asset discovery, vulnerability scanning, risk prioritization, remediation, and ongoing monitoring in a Nessus-driven vulnerability management lifecycle.
Common Vulnerabilities and Exposures11:51
Explore how CVE codes standardize discussion of flaws and exposure in software and hardware, enabling professionals to identify, categorize, and discuss vulnerabilities with a common ID.
Common Vulnerability Scoring System10:19
Explore how the common vulnerability scoring system (cvss) assigns 0–10 base, temporal, and environmental scores across v2, v3, and v4 to rank risks and prioritize fixes.
Exploring CVE and NVD Database15:06
Explore how to navigate the CVE and NVD databases from Mitre to find vulnerabilities by CVE number or keyword, assess CVSS severity, and track advisories to protect systems.
Introduction to Nessus18:12
Explore Nessus as a powerful vulnerability scanner that detects vulnerabilities across platforms, uses CVSS and CVE for risk scoring, and supports reporting, continuous monitoring, asset discovery, and compliance checks.
Nessus Product Editions & Licensing7:43
Explore Nessus product editions and licensing, including essential, professional, expert, and Tenable.io cloud options, with IP limits, plugins, and credential scanning for lab use.

Installing EVE-NG for Virtual Lab7:43
Download iso from eve-ng.net and install eve-ng community edition 6.204 on vmware workstation pro, configure a ubuntu-based lab with 16 gb ram and 4 cores, then access the web interface.
Adding Switches Images to EVE-NG5:34
Upload switches images to eve-ng using winscp, extract with seven zip, apply fixed permissions, and verify layer 2 and layer 3 images for Nessus vulnerability scanning lab readiness.
Adding Kali Linux 2025 to EVE NG5:49
Download and set up kali linux 2025 in eve ng by extracting the qcow2 image with seven zip, renaming it, and importing into a new eve ng directory.
Convert Kali Linux 2025 VM9:42
Learn to download the latest Kali Linux VMware image, extract it with 7-zip, and convert the vmdk to qcow2 for use in Eve ng, enabling a functional Kali Linux lab.
Add Nessus Lab Images to EVE-NG6:12
Upload ready-made Nessus lab images to EVE-NG, including Fortigate firewall, Kali Linux, Metasploitable 2, OWASP, Ubuntu, Windows 11, and Windows Server 2019, then apply fixed permissions and verify file structure.
Building Nessus Lab Topology5:42
Build a Nessus lab topology with a Fortigate firewall and lan, wan, and management zones, and export or import the topology through a management cloud.
Importing Labs Into EVE-NG2:36
Export and import lab topologies in eve-ng using the shared topology, then import in the community edition and adjust the management IP.
Configuring Servers in the Lab9:21
Configure the lab topology by assigning static IPv4 addresses to the OWASP top ten server, Windows Server 2019, and Metasploitable 2, with gateway 192.168.1.254 and DHCP disabled.
Setting Up External Devices5:29
Set up external devices—Windows 11, Ubuntu, and Kali Linux—in the lab by assigning static IP addresses (10.0.1.21, 10.0.1.2, 10.0.1.3), gateway 10.0.1.254, DNS 8.8.8.8/1.1.1.1, disable firewall, and ping to verify.
Firewall Configuration for Lab13:36
Configure a Fortigate firewall for a lab by disabling ntp, setting mgmt, lan, and wan interfaces with dns and static routes, and creating policies for lab access.

Getting Nessus Essentials License6:49
Learn how to obtain a Nessus Essentials license by generating activation codes with temporary emails, downloading Nessus Essentials for Windows or Linux, and applying the activation key.
Install Nessus on Windows 1110:17
Download and install Nessus essential on Windows 11, configure remote desktop access and routes, enter activation code, and complete plugin download to begin scanning.
Install Nessus on Linux Ubuntu10:43
Learn to download and install nessus on ubuntu linux, set up remote desktop, install and start nessus services, and begin a nessus professional trial with plugin activation.
Install Nessus on Linux Kali9:57
Show how to download and install Nessus on Kali Linux, set up remote desktop, install xrdp, install via dpkg, start services, and activate Nessus with key on localhost web interface.
Web Interface Overview14:28
Explore the Nessus web interface, login to Nessus professional or essential, navigate scans, folders, policies, templates, and settings, and manage plugins, import/export policies, and account security.

Scanning templates Categories8:41
Learn how scanning templates act as blueprints to quickly set up vulnerability scans by selecting templates and launching, covering discovery, vulnerability, and compliance categories.
Understanding Severity Levels9:08
Understand how the Nessus vulnerability scanner assigns severity levels—critical, high, medium, low, and information—to prioritize fixes by risk, potential to be exploited, and CVSS scores.

Ping-Only Discovery Overview4:22
Learn how ping-only discovery scans verify live hosts with minimal network traffic using ICMP by default, with optional TCP ping, without OS fingerprinting or vulnerability scanning.
Ping-Only Discovery Lab7:29
Explore asset discovery with a ping-only Nessus lab, using ARP and ICMP to identify devices across two subnets, then note that this scan reveals assets but no vulnerabilities.
Host Discovery Scan Overview7:14
Identify active hosts within a given ip range through host discovery to narrow targets before vulnerability scanning, and gather os, ip, fqdn, and open ports for deeper assessment.
Host discovery Scan Lab6:16
Explore host discovery in Nessus, expanding beyond ping-only scans with TCP, ICMP, and ARP to identify alive hosts, OS identification, open ports, and fully qualified domain names.
OS Identification Lab9:24
Use Nessus Professional to perform host discovery for operating system identification across targeted IPs, revealing Windows, Linux, and Ubuntu details.

Basic Network Scan Overview9:18
The basic network scan performs a full system vulnerability assessment using all Nessus plugins, with authenticated or unauthenticated options, port and service detection, OS fingerprinting, and severity-based findings.
Basic Network Scan Lab8:47
Learn to run a basic vulnerability scan on Windows Server 2019 (192.168.1.2) using a basic network scan, exploring port scanning, service detection, and non-configurable plugins.

Credential Validation Overview3:35
Learn how credential validation tests Windows and Unix credentials by validating authentication for authenticated and unauthenticated scans, showing login outcomes and common failure reasons for pre-scan troubleshooting.
Credential Validation Lab11:53
Configure credential validation scans to verify credentials for authenticated vulnerability testing. Test across Windows Server 2019, Metasploitable, Ubuntu, and Kali to confirm credentials work.
Credentialed & Non-Credentialed Scanning8:32
Credentialed (authenticated) and non-credential (unauthenticated) scanning with Nessus reveal a fuller security picture: authenticated scans dive inside with admin access for higher accuracy, while unauthenticated scans run faster from outside.
Unauthenticated Scanning Lab6:59
Explore unauthenticated vs authenticated Nessus scanning, run basic network scans on a Metasploitable target, and compare visibility, plugin results, and remediation steps.
Prerequisite for Credentialed Scan7:14
Enable the remote registry on Windows to support credential scans, and configure file and printer sharing, network discovery, and never notify user account control for deeper visibility.
Authenticated Scanning Lab6:13
Perform an authenticated vulnerability scan on the Metasploitable target to reveal more flaws than an unauthenticated scan. Compare results, times, and remediation guidance using credential scanning with MSF admin.

Advanced Scan Overview5:54
Master advanced scanning with a fully customizable template that gives you complete control over plugins, credentials, port configurations, and performance settings to fit your environment.
Active Directory Advanced Scan Lab8:32
Conduct an active directory advanced scan in Nessus on Windows Server 2019, using administrator credentials, enabling identity data collection and remote registry, to identify critical vulnerabilities and recommended patches.
FortiGate Vulnerability Scan Lab9:37
Perform a Fortigate firewall vulnerability scan with Nessus, configure SNMP v3 and SSH credentials, enable ping, and review results to identify and remediate critical, high, and medium flaws.
Cisco Switch Vulnerability Scan Lab9:02
Learn to perform a Cisco switch vulnerability scan with Nessus using an advanced lab setup, SNMP and Telnet credentials, and interpret results showing critical SNMP risks.
Advanced Dynamic Scan Overview5:40
Configure advanced dynamic scan to create dynamic filters by cve id, plugin name, or severity, apply them to a target; run, and review fast, focused vulnerability results.
Advanced Dynamic Scan Lab10:03
Explore hands-on vulnerability assessment using a practical advanced dynamic scan lab with Nessus to scan Ubuntu systems, configure SSH credentials, plugins, and analyze critical and high findings.

Malware and Web Application Scan4:43
Explore Nessus malware scan and web application test to detect active threats, backdoors, and misconfigurations, using credential scanning to inspect the file system and analyze running processes.
Web Application Test Lab10:21
Learn to run a Nessus web application vulnerability scan using the web application test lab template, configure login credentials, analyze results, and identify remediation steps for web vulnerabilities.
Active Directory Starter Scan2:26
Explore the Active Directory starter scan, a dedicated template that quickly uncovers misconfigurations in Active Directory and uses credential assessment to reveal high impact weaknesses in the identity system.
Overview of Vulnerabilities Tab9:01
Explore the vulnerability tab to view color-coded severity levels—critical, high, medium, low, and info—and apply cvss, vp vulnerability priority rating, and exploit prediction scoring system to prioritize fixes.

Policy Compliance Auditing5:04
Explore policy compliance auditing in Nessus by verifying system configuration against standards and best practices, including CIS benchmarks, enforcing password policies, account lockout, and asset compliance across devices.
Policy Compliance Auditing Lab8:51
Practice a policy compliance auditing lab in Nessus Professional on Windows 11, configure credentials, select CIS benchmarks, and review non-compliant password and account policies.
Template and Policy Overview6:37
Learn how Nessus uses templates for quick, preset scans and policies for custom, reusable scan configurations, enabling precise control over what to scan, how deep, and which plugins to run.
Create Custom Policy Lab4:22
Create a tailored web application policy in Nessus by selecting a template, customizing discovery, assessment, and credentials settings, saving it for reuse in future scans.

Requirements

Basic understanding of networking concepts.
Familiarity with operating systems like Windows and Linux.
Virtualization software like VMware Workstation and EVE NG.
No prior experience with Nessus is required.
A PC or laptop capable of running virtualization tools.

Description

Course Description:

Are you ready to master one of the most powerful tools in vulnerability assessment?
Welcome to Practical Nessus Vulnerability Scanning — a comprehensive, hands-on course designed to teach you how to effectively use Tenable Nessus, the industry-leading vulnerability scanner used by cybersecurity professionals around the world.

Whether you're a cybersecurity beginner, network administrator, or a security analyst preparing for certifications like CEH, Security+, or OSCP, this course will help you build real-world skills to identify, assess, and report vulnerabilities in any environment.

You'll gain hands-on experience by building a real-world lab using EVE-NG, configuring vulnerable targets, and performing both credentialed and non-credentialed scans. This course equips you with practical skills to identify, analyze, and mitigate vulnerabilities across a variety of operating systems and network devices.

Who This Course is For:

Cybersecurity students and IT professionals looking to upskill
Ethical hackers, SOC analysts, and penetration testers
Network/system admins who want to enhance their organization’s security
Anyone interested in learning Nessus through real-world, practical examples

What You'll Learn:

Introduction & Fundamentals:
Start by understanding the core concepts of vulnerabilities and vulnerability management. Learn about the lifecycle of vulnerability handling, common vulnerabilities and exposures (CVE), and how to interpret risk using the Common Vulnerability Scoring System (CVSS). Dive into the Nessus ecosystem, exploring its product editions and licensing options.

Lab Environment Setup with EVE-NG:
Gain practical experience by setting up a full virtual lab environment using EVE-NG. You’ll install and configure Kali Linux, switches, Nessus lab images, and firewalls to simulate a realistic network topology — the perfect playground to test and scan.

Installing Nessus:
Get step-by-step guidance on obtaining the Nessus Essentials license and installing Nessus on multiple platforms, including Windows 11, Ubuntu Linux, and Kali Linux. Explore the web interface to get comfortable with its features and navigation.

Scanning & Analysis:
Master Nessus scanning with detailed lessons on scan templates, severity levels, and different scanning methods. Perform discovery scans like ping-only and host discovery, as well as OS identification. Understand the critical difference between credentialed and non-credentialed scans through practical labs.

Advanced Scanning:
Advance your skills with complex scanning techniques including Active Directory, FortiGate firewalls, and Cisco switches vulnerability assessments. Explore dynamic scans tailored for large and diverse networks.

By the end of this course, you'll confidently perform vulnerability assessments using Nessus, interpret results accurately, and apply your skills in real-world security environments.

Who this course is for:

Ethical Hackers & Penetration Testers
Network admins and system engineers
Students preparing for security certifications
Cybersecurity beginners and IT professionals
Anyone interested in hands-on Nessus experience
Anyone Interested in Scanning

Practical Nessus Vulnerability Scanning

What you'll learn

Explore related topics

Course content

Introduction9 lectures • 1hr 35min

Lab Environment Setup with EVE-NG10 lectures • 1hr 12min

Installing Nessus5 lectures • 52min

Understanding Nessus Scans:2 lectures • 18min

Discovery Scans:5 lectures • 35min

Network Scanning:2 lectures • 18min

Credentialed & Non-Credentialed Scans:6 lectures • 44min

Advanced & Targeted Scans:6 lectures • 49min

Web & Application Scans:4 lectures • 27min

Policy Compliance:4 lectures • 25min

Requirements

Description

Who this course is for: