Kamis, 03 September 2009

Install Nessus di Debian Lenny

cari paket-paket yang berhubungan dengan kata kunci "nessus"


# apt-cache search nessus
harden-remoteaudit - Audit your remote systems from this host
libnasl-dev - Nessus Attack Scripting Language, static library and headers
libnasl2 - Nessus Attack Scripting Language, shared library
libnessus-dev - Nessus static libraries and headers
libnessus2 - Nessus shared libraries
nessus - Remote network security auditor, the client
nessus-dev - Nessus development header files
nessus-plugins - Nessus plugins
nessusclient - Transitional package to openvas-client
nessusd - Remote network security auditor, the server


Install nessus client
# apt-get install nessus

Install nessus server

# apt-get install nessusd
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
libswfdec-0.6-90 libuser-identity-perl libepc-ui-1.0-1 libmtp7 libepc-1.0-1 libgksu1.2-0 aspell libraw1394-8
djvulibre-desktop libicu38 libmime-types-perl libgda3-common libgksuui1.0-1 libmagick++10 gnome-network-admin libnm-util0
libjaxp1.3-java-gcj python-numeric libcamel1.2-11 libpt-1.10.10-plugins-alsa libtotem-plparser10 libfile-remove-perl
libpt-1.10.10 libsoup2.2-8 libsuitesparse-3.1.0 libgpod3 libxerces2-java-gcj libeel2-data libdirectfb-1.0-0 p7zip dhcdbd
libcurl3 libio-stringy-perl libjaxp1.3-java gnome-spell libssh2-1 libpoppler3 libxerces2-java
libobject-realize-later-perl libeel2-2.20 openoffice.org-style-andromeda libopal-2.2 libxalan2-java libdvdread3
libgnomevfs2-bin libiw29 libedataserver1.2-9 libgucharmap6 libgda3-3 svgalibg1 libpt-1.10.10-plugins-v4l
libgnome-desktop-2 libavahi-core5 libmail-box-perl libcucul0 libxalan2-java-gcj libpoppler-glib3
Use 'apt-get autoremove' to remove them.
The following extra packages will be installed:
libnasl2 nessus-plugins snmp
The following NEW packages will be installed:
libnasl2 nessus-plugins nessusd snmp
0 upgraded, 4 newly installed, 0 to remove and 1 not upgraded.
Need to get 4347kB of archives.
After this operation, 21.9MB of additional disk space will be used.
Do you want to continue [Y/n]? Y
Get:1 http://202.6.233.34 testing/main libnasl2 2.2.10-1 [318kB]
Get:2 http://202.6.233.34 testing/main nessus-plugins 2.2.10-6 [2785kB]
Get:3 http://202.6.233.34 testing/main nessusd 2.2.10-3 [206kB]
Get:4 http://202.6.233.34 testing/main snmp 5.4.1~dfsg-12 [1038kB]
Fetched 4347kB in 0s (4486kB/s)
Preconfiguring packages ...
Selecting previously deselected package libnasl2.
(Reading database ... 169172 files and directories currently installed.)
Unpacking libnasl2 (from .../libnasl2_2.2.10-1_i386.deb) ...
Selecting previously deselected package nessus-plugins.
Unpacking nessus-plugins (from .../nessus-plugins_2.2.10-6_i386.deb) ...
Selecting previously deselected package nessusd.
Unpacking nessusd (from .../nessusd_2.2.10-3_i386.deb) ...
Selecting previously deselected package snmp.
Unpacking snmp (from .../snmp_5.4.1~dfsg-12_i386.deb) ...
Processing triggers for man-db ...
Setting up libnasl2 (2.2.10-1) ...
Setting up nessus-plugins (2.2.10-6) ...
Setting up nessusd (2.2.10-3) ...
/var/lib/nessus/private/CA created
/var/lib/nessus/CA created
Congratulations. Your server certificate was properly created.
The following files were created :

. Certification authority :
Certificate = /var/lib/nessus/CA/cacert.pem
Private key = /var/lib/nessus/private/CA/cakey.pem

. Nessus Server :
Certificate = /var/lib/nessus/CA/servercert.pem
Private key = /var/lib/nessus/private/CA/serverkey.pem
/etc/nessus/nessusd.conf updated to use the server's certificate / keys
Setting up snmp (5.4.1~dfsg-12) ...


* Coba baca dokumen-dokumen di /usr/share/doc/nessus
Nah jadi bisa kan? Dari Om Har, rules dibuat kosong saja. Tekan Ctrl-D.

* Register nessus
# http://www.nessus.org/plugins/index.php?view=register
referensi: http://bsdnetwork.blogsome.com/2007/02/23/nessus-debian/

* Setelah melakukan register nessus
Plugin yang diload semakin banyak. Sebelum diregister sepertinya hanya 3000-an. Sekarang setelah diregister mencapai 29914. Efek lain dari semakin banyaknya plugin nessus yang diload, aplikasi nessus dan nessud memakan CPU yang besar. Oleh karena itu nessus membutuhkan daya komputasi yang besar.

* Bagaimana arsitektur aplikasi nessus
Mengapa harus ada server dan client?

1 komentar:

Unknown mengatakan...

Mas...blog'a saya sambungkan ke http://planet.debian-id.org y?