Nessus

Nessus has a server part and a client part. You must add a user to the server part before you can run nessus. You add a user using the
nessus-adduser
command. This program will prompt you for login name, then for authentication method. You can choose between pass and cert. Password is the easiest but certificate can be more secure.
If you choose pass it will ask for a password.
If you choose to use cert you will need to run nessus-mkcert.
Next it will ask you for a set of rules that will apply to this user:
accept 129.123.0.0/16
default deny
Will allow the user to scan the 129.123.x.x subnet and not anything else.

In order to use all of the nexus plugins you must register at the nexus sight. To do this you must go to:

nessus.org/register

and give them your email address. They will then send you the command to run to us all of their plugins.

You can provide an ssh login and nessus will login and search for local exploits.

netcat(or nc)

netcat hostname port

netcat -l -p 5600 -vv

will tell netcat to listen on port 5600 in very verbose mode

netcat localhost 5600

will tell netcat to connect on port 5600(trying running the last two commands on different consoles at the same time)

-e specify file name to run after you connect

nc -l -p 5600 -e /bin/bash

will create something like a telnet server(bad idea)

-p tells netcat to run on a certain local port

-r tells netcat to pick random ports on local and remote

-s allows you to choose a specific local address

netcat will recognize service names from /etc/services

2005-02-25T16:50:45