最後更新: 2022-12-29

介紹

Tenable Core

pre-installs Nessus Essentials on the CentOS
It is designed for people to use in a VM

License Utilization

Addresses will no longer count against your license 90 days after their last scan.

 

---

nessusd service

 

service nessusd start

Panel: https://IP:8834

 

 

---

To register Nessus offline

 

nessuscli fetch --challenge

# 到 offline activation website 獲得 active code

https://plugins.nessus.org/v2/offline.php

download the nessus.license file

nessuscli fetch --register-offline <license.file>

Checking

nessuscli fetch --code-in-use
 

---

Update nessus [必須]

 

nessuscli update --all

Plugins are compiling, Nessus functionality will be limited until compilation is complete.

# Shows whether Nessus is properly registered and is able to receive updates.

nessuscli fetch --check

Checking...
Updates are configured properly

 

---

User Account

 

nessuscli adduser sadmin         # rmuser

nessuscli lsuser

 

---

Scan IP with SNI("Host" header)

 

example.com[x.x.x.x]

 

---

Plugins

 

List

 

https://www.tenable.com/plugins

To install plugins manually

/opt/nessus/sbin/nessuscli update <tar.gz filename>

 

---

Backup & Restore

 

 * When you backup Nessus, your license information and settings are preserved.

 * Nessus does not back up scan results.

Backup Nessus:

nessuscli backup --create <backup_filename>

Linux: /opt/nessus/var/nessus

Restore Nessus:

service nessusd stop

nessuscli backup --restore path/to/<backup_filename>

service nessusd start

 

---

Reset Nessus

 

# This command resets Nessus to a fresh state,
# deleting all registration information, settings, data, and users.

nessuscli fix --reset-all

 

 

---

Advanced settings

 

# List all advanced settings, including those you have not set.

nessuscli fix --show

 

---

Log

 

/opt/nessus/var/nessus/logs/

nessusd.messages — Nessus scanner log
www_server.log — Nessus web server log
backend.log — Nessus backend log
nessuscli.log — Nessus CLI log