Scribd
Upload
5 views1 page

Nessus and Nikto Vulnerability Analysis Guide

The document outlines procedures for conducting vulnerability analysis using Nessus and Nikto. It details steps for creating a new policy in Nessus, including settings for host discovery and port scanning, as well as scheduling scans. Additionally, it describes the use of Nikto for web server scanning, noting its lack of stealth and potential for detection by IDS/IPS systems.

Uploaded by

Aamir Khan
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
5 views1 page

Nessus and Nikto Vulnerability Analysis Guide

The document outlines procedures for conducting vulnerability analysis using Nessus and Nikto. It details steps for creating a new policy in Nessus, including settings for host discovery and port scanning, as well as scheduling scans. Additionally, it describes the use of Nikto for web server scanning, noting its lack of stealth and potential for detection by IDS/IPS systems.

Uploaded by

Aamir Khan
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

Module 05: Vulnerability Analysis

Vulnerability Analysis Using Nessus


[Link]
Username: admin / Password: password
Create a new policy
Policy Templates > Advanced Scan
Settings section, select Host Discovery from the DISCOVERY drop-down list.
Turn off Ping the remote host option (toggle the blue switch to left).
Select Port Scanning and check the Verify open TCP ports found by local port
enumerators option.
Setting section, select ADVANCED The Policy General Settings window with
Advanced Setting Type appears. Set the values of Max number of TCP sessions per
host and Max number of TCP sessions per scan as unlimited.
Create a new scan with new policy.
Schedule settings > turn off the Enabled switch, select Launch from the drop-
down list to start the scan.

CGI Scanning with Nikto


Nikto is not a stealthy tool, it scans a webserver in the shortest time but
will get logged in an IDS/IPS.
nikto -h
nikto -H
nikto -h [Link] -Tuning 1

You might also like