> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/vulnerability-scanner/nessus.md).

# Nessus

**Nessus** is a **vulnerability scanner** developed by **Tenable, Inc.** It helps security professionals identify and assess vulnerabilities, misconfigurations, and compliance issues in systems, applications, and network infrastructure.

### Nessus Installation

Visit the official Nessus documentation to choose the appropriate installer based on your operating system:\
<https://docs.tenable.com/nessus/Content/InstallNessus.htm>

<figure><img src="/files/tyLSDJOVtgQf5KeSsFMU" alt=""><figcaption></figcaption></figure>

Supported platforms:

* Linux
* Windows
* macOS

***

#### Download Nessus for Linux

To download Nessus for Kali Linux (Debian-based), go to the following link:\
<https://www.tenable.com/downloads/nessus>

* Select **Linux** as your platform
* Choose the **Debian-amd64** version for Kali Linux
* Download the `.deb` installer package

Alternative download options:

* Using `curl` (command-line download)
* Docker image
* Virtual Machine image

***

#### Install Nessus

Navigate to the directory where the package was downloaded and run the following command (replace version as needed):

```bash
sudo apt install ./Nessus-10.8.3-debian10_amd64.deb
```

Start the Nessus service:

```bash
sudo /bin/systemctl start nessusd.service
```

***

#### Access the Nessus Web Interface

Open your web browser and navigate to:

```
https://127.0.0.1:8834/
```

You may need to accept a security exception for the self-signed SSL certificate.

***

#### Initial Setup

1. Click **Next** on the welcome screen

<figure><img src="/files/n1EwwlUszgxMHm16mzrb" alt=""><figcaption></figcaption></figure>

2. Choose **Register for Nessus Essentials**

<figure><img src="/files/6W2A8ImjxkIckp4NzDkm" alt=""><figcaption></figcaption></figure>

3. Enter your email address to receive an **activation code**

<figure><img src="/files/G2nxmwW3Rv9qZLk10flo" alt=""><figcaption></figcaption></figure>

4. Set a **username** and **password**

<figure><img src="/files/FSPg2tVjeKcQiIYmgkol" alt=""><figcaption></figcaption></figure>

5. Wait for the Nessus service to complete the setup and plugin installation

<figure><img src="/files/ae2VrQRJf65jdhmlephx" alt=""><figcaption></figcaption></figure>

Once setup is complete, you will be redirected to the Nessus dashboard. Log in using the credentials you created. Nessus will start setting up the plugins, which will take some time to complete.

<figure><img src="/files/BDN1npMvDy0MQMXXrPBc" alt=""><figcaption></figcaption></figure>

***

#### Creating a Scan

1. Click **Create a New Scan**

<figure><img src="/files/G8JdZ5IbkGpX2g0Sx6pt" alt=""><figcaption></figcaption></figure>

2. Select **Basic Network Scan**

<figure><img src="/files/l9RhTF1HSUmrUyaupLlh" alt=""><figcaption></figcaption></figure>

3. Configure the following settings:

* **Name**
* **Description** (optional)
* **Folder** (optional)
* **Targets** (IP addresses, hostnames, or uploaded target list)

<figure><img src="/files/YUgP3aB9Ul4mArBxckxi" alt=""><figcaption></figcaption></figure>

4. Click **Save**
5. To begin scanning, click **More** and then select **Launch**

<figure><img src="/files/cauLvYSqDWlam316Qin0" alt=""><figcaption></figcaption></figure>