‫Let's perform another vulnerability scan.
‫I want to perform an aggressive scan to find as many vulnerabilities as possible.
‫Go to college and start the Nessa's demon if it's not already started.
‫You service an SSD status to learn if it's running.
‫OK, so it's inactive, so I use service necessity start to start as service.
‫Now go to your browser and connect to the Nessus interface.
‫It is an HTTP service is running on the same machine, so I'll use one two seven zero zero one lookback
‫IP address referred to as localhost.
‫And the port of the Nessa's service is eight three four.
‫Sign in using your credential.
‫Click the new scan button.
‫Now let's choose advanced scan for this scan.
‫Will be more aggressive than a basic network scan.
‫So enter the basic info, give the scan and name and enter description if you want.
‫And the targets.
‫Here I have a Windows XP with an IP address of two zero seven and Métis voidable to Linux system with
‫an IP address of two zero six.
‫Here I have a third system, an up to date Windows eight, and it's IP addresses two to three.
‫Right, so back to Cali and enter the IP addresses of the target systems to zero six four meters, voidable
‫to zero seven for Windows XP and two to three for Windows eight.
‫Now click discovery and the list of the left.
‫So we're simply going to accept the default on this page, so let's click on Assessment over to the
‫left.
‫And on this page, we want to check perform thorough tests, so check the box.
‫Then move to the report section in the options on the left, you can override the normal verbosity,
‫make it report as much info as possible.
‫So next click, the advanced option in the left to the left, the only thing we're going to do here
‫is uncheck enable safe checks.
‫Now on a normal production network, you would leave this box checked.
‫You don't want to take down production systems when scanning.
‫But for our purposes here, we want to gather as much information as possible.
‫So we're going to one check it.
‫Now click on the credentials tab.
‫Select the S.H. option.
‫In the list on the left.
‫Now, since we know the username and password for the portable two machine, we're going to put those
‫credentials in here.
‫Remember the username and password of both MSF admin?
‫Change the authentication method to password and put it in the username and password below.
‫Now in the plug ins tab.
‫We only need to activate the plug ins that have to do with what might be running on a Linux system so
‫we can disable a few things here.
‫OK, I paused the demo here, I've got to make an apology, it's a late update while capturing the demo,
‫I forgot that I have Windows targets and disable the windows plug ins.
‫It's a mistake.
‫And I just wanted to show you that what we do here is if there's a problem, there's always a solution.
‫So if you have Windows targets, please do not disable the windows plug ins.
‫All right, let's move on.
‫We can finally click save at the bottom.
‫So here's the scan and we're ready to run it.
‫Simply click the great triangle at the far right of our skin, which stands for launching the scan.
‫And yes, the scan is started now, you can pause or stop the scan any time you want.
‫So click the scan and we see the results in real time.
‫OK, boy, that's going to take a while to run, so it's probably a good time to check your e-mail.
‫Grab a cup of coffee maybe, but just make sure you come back to review the results.