{"id":322,"date":"2018-10-31T13:12:09","date_gmt":"2018-10-31T05:12:09","guid":{"rendered":"https:\/\/blog.espnlol.com\/?p=322"},"modified":"2022-04-20T18:29:12","modified_gmt":"2022-04-20T10:29:12","slug":"nessus%e6%bc%8f%e6%b4%9e%e6%89%ab%e6%8f%8f","status":"publish","type":"post","link":"https:\/\/blog.espnlol.com\/?p=322","title":{"rendered":"docker\u5feb\u901f\u5b89\u88c5Nessus\u6f0f\u6d1e\u626b\u63cf\u5e76\u6fc0\u6d3b\u4f7f\u7528"},"content":{"rendered":"\n

Nessus\u7b80\u4ecb<\/h2>\n\n\n\n

Nessus\u662f\u4e00\u4e2a\u529f\u80fd\u5f3a\u5927\u800c\u53c8\u6613\u4e8e\u4f7f\u7528\u7684\u8fdc\u7a0b \u5b89\u5168\u626b\u63cf\u5668\uff0c\u5b83\u4e0d\u4ec5 \u514d\u8d39\u800c \u4e14\u66f4\u65b0\u6781\u5feb\u3002\u5b89\u5168\u626b\u63cf\u5668\u7684\u529f\u80fd\u662f\u5bf9\u6307\u5b9a\u7f51\u7edc\u8fdb\u884c\u5b89\u5168\u68c0\u67e5\uff0c\u627e\u51fa\u8be5\u7f51\u7edc\u662f\u5426\u5b58\u5728\u6709\u5bfc\u81f4\u5bf9\u624b\u653b\u51fb\u7684\u5b89\u5168\u6f0f\u6d1e\u3002\u8be5\u7cfb\u7edf\u88ab\u8bbe\u8ba1\u4e3aclient\/sever\u6a21\u5f0f\uff0c\u670d \u52a1\u5668\u7aef\u8d1f\u8d23\u8fdb\u884c\u5b89\u5168\u68c0\u67e5\uff0c\u5ba2\u6237\u7aef\u7528\u6765\u914d\u7f6e\u7ba1\u7406\u670d\u52a1\u5668\u7aef\u3002\u5728\u670d\u52a1\u7aef\u8fd8\u91c7\u7528\u4e86plug-in\u7684\u4f53\u7cfb\uff0c\u5141\u8bb8\u7528\u6237\u52a0\u5165\u6267\u884c\u7279\u5b9a\u529f\u80fd\u7684\u63d2\u4ef6\uff0c\u8fd9\u63d2\u4ef6\u53ef\u4ee5\u8fdb\u884c\u66f4\u5feb\u901f\u548c \u66f4\u590d\u6742\u7684\u5b89\u5168\u68c0\u67e5\u3002\u5728Nessus\u4e2d\u8fd8\u91c7\u7528\u4e86\u4e00\u4e2a\u5171\u4eab\u7684\u4fe1\u606f\u63a5\u53e3\uff0c\u79f0\u4e4b\u77e5\u8bc6\u5e93\uff0c\u5176\u4e2d\u4fdd\u5b58\u4e86\u524d\u9762\u8fdb\u884c\u68c0\u67e5\u7684\u7ed3\u679c\u3002\u68c0\u67e5\u7684\u7ed3\u679c\u53ef\u4ee5HTML\u3001\u7eaf\u6587\u672c\u3001 LaTeX\uff08\u4e00\u79cd\u6587\u672c\u6587\u4ef6\u683c\u5f0f\uff09\u7b49\u51e0\u79cd\u683c\u5f0f\u4fdd\u5b58\u3002
\u5728\u672a\u6765\u7684\u65b0\u7248\u672c\u4e2d\uff0cNessus\u5c06\u4f1a\u652f\u6301\u5feb\u901f\u66f4\u5feb\u7684\u5b89\u5168\u68c0\u67e5\uff0c\u800c\u4e14\u8fd9\u79cd\u68c0\u67e5\u5c06\u4f1a\u5360\u7528\u66f4\u5c11\u7684\u5e26\u5bbd\uff0c\u5176\u4e2d\u53ef\u80fd\u4f1a\u7528\u5230\u96c6\u7fa4\u7684\u6280\u672f\u4ee5\u63d0\u9ad8\u7cfb\u7edf\u7684\u8fd0\u884c\u6548\u7387\u3002
Nessus\u7684\u4f18\u70b9\u5728\u4e8e\uff1a
1\u3001 \u5176\u91c7\u7528\u4e86\u57fa\u4e8e\u591a\u79cd\u5b89\u5168\u6f0f\u6d1e\u7684\u626b\u63cf\uff0c\u907f\u514d\u4e86\u626b\u63cf\u4e0d\u5b8c\u6574\u7684\u60c5\u51b5\u3002
2\u3001 \u5b83\u662f\u514d\u8d39\u7684\uff0c\u6bd4\u8d77\u5546\u4e1a\u7684\u5b89\u5168\u626b\u63cf\u5de5\u5177\u5982ISS\u5177\u6709\u4ef7\u683c\u4f18\u52bf\u3002
3\u3001 \u5728Nmap\u7528\u6237\u53c2\u4e0e\u7684\u4e00\u6b21\u5173\u4e8e\u6700\u559c\u6b22\u7684\u5b89\u5168\u5de5\u5177\u95ee\u5377\u8c03\u67e5\u4e2d\uff08\u8bc4\u9009\u7ed3\u679c\u9644\u540e\uff09\uff0c\u5728\u4e0e\u4f17\u591a\u5546\u7528\u7cfb\u7edf\u53ca\u5f00\u653e\u6e90\u4ee3\u7801\u7684\u7cfb\u7edf\u7ade\u4e89\u4e2d\uff0cNessus\u540d\u5217\u699c\u9996\u3002\u7fa4\u4f17\u7684\u773c\u775b\u662f\u96ea\u4eae\u7684\uff1a\uff09\u3002
4\u3001 Nessus\u6269\u5c55\u6027\u5f3a\u3001\u5bb9\u6613\u4f7f\u7528\u3001\u529f\u80fd\u5f3a\u5927\uff0c\u53ef\u4ee5\u626b\u63cf\u51fa\u591a\u79cd\u5b89\u5168\u6f0f\u6d1e\u3002<\/p>\n\n\n\n

Nessus\u5b89\u88c5<\/h2>\n\n\n\n
docker run --name \"nessus-pro\" -d -p 8834:8834  -e USERNAME=admin  -e PASSWORD=xxxxxxxxx   -v \/etc\/localtime:\/etc\/localtime:ro  -v \/data\/nessus:\/data\/nessus  tenableofficial\/nessus:10.0.2<\/pre>\n\n\n\n
\u5b89\u88c5\u5b8c\u6210\u7b49\u5f85\u6b63\u5e38\u542f\u52a8\uff0c\u5728\u6d4f\u89c8\u5668\u8f93\u5165https:\/\/$ip:8834,\u5373\u53ef\u6253\u5f00\uff0c\u5982\u56fe\u76f4\u63a5\u8fdb\u5165\u8f6f\u4ef6\u754c\u9762<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\"\"<\/a>
\u8fdb\u5165\u9875\u9762\u4f1a\u53d1\u73b0\u5728\u4ec0\u4e48\u4e5f\u65e0\u6cd5\u64cd\u4f5c<\/figcaption><\/figure>\n\n\n\n
\u4e0d\u8981\u6025\uff0c\u5148\u8fdb\u5165https:\/\/zh-cn.tenable.com\/products\/nessus\/activation-code\u6ce8\u518c\u4e00\u4e2a\u8d26\u53f7\uff0c\u7136\u540e\u4f1a\u5f80\u4f60\u90ae\u7bb1\u53d1\u9001\u4e00\u4e32\u6fc0\u6d3b\u7801\uff0c\u5148\u8bb0\u5f55\u4e0b\u6765<\/p>\n\n\n\n
\u8fdb\u5165\u5bb9\u5668\u83b7\u53d6\u83b7\u53d6\u79bb\u7ebf\u6fc0\u6d3b\u7801<\/p>\n\n\n\n
docker exec -it nessus-pro \/bin\/bash\nroot@0bb5f5302978 sbin]# \/opt\/nessus\/sbin\/nessuscli fetch --challenge\n#\u4f1a\u8f93\u5165\u5982\u4e0b\u4e00\u4e32\u79bb\u7ebf\u6fc0\u6d3b\u7801\nChallenge code: xxxde17f6c7b02d8b598639607840a39xxxxxxxx<\/pre>\n\n\n\n
\u8f6c\u5230Nussus\u79bb\u7ebf\u6fc0\u6d3b\u6388\u6743\u7f51\u7ad9,\u6253\u5f00https:\/\/plugins.nessus.org\/v2\/offline.php<\/span><\/a>,\u5c06\u4e0a\u9762\u7684\u79bb\u7ebf\u6fc0\u6d3b\u7801\u4e0e\u90ae\u7bb1\u91cc\u7684\u6fc0\u6d3b\u7801\u8f93\u5165\u9875\u9762\u4e0a<\/p>\n\n\n\n
\"\"<\/a>
\u4e00\u5b9a\u8981\u6b63\u786e\u8f93\u5165<\/figcaption><\/figure>\n\n\n\n
\u70b9\u51fbsubmit\u540e\u4f1a\u770b\u5230\u79bb\u7ebf\u6fc0\u6d3blicense\u4e0e\u63d2\u4ef6\u4e0b\u8f7d\u5305<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u8fdb\u5165\u5bb9\u5668\u79bb\u7ebf\u6fc0\u6d3b\u8f6f\u4ef6\u4ee5\u53ca\u5bfc\u5165plugins\u5305<\/p>\n\n\n\n
docker exec -it nessus-pro \/bin\/bash\n#\u5c06\u79bb\u7ebflicense\u5199\u5982\u4e00\u4e2a\u6587\u4ef6\nvi \/opt\/nessus.license\nxxxxxxx\nxxxxxxx\nxxxxxxx\n#\u6fc0\u6d3b\n\/opt\/nessus\/sbin\/nessuscli fetch --register-offline \/opt\/nessus.license\n#\u5c06\u63d2\u4ef6\u5305\u4f20\u5230\/data\/nessus\u76ee\u5f55\u4e0b\uff0c\u8fdb\u5bb9\u5668\u5c31\u80fd\u770b\u5230\u4e86\n\/opt\/nessus\/sbin\/nessuscli update \/data\/nessus\/all-2.0.tar.gz<\/pre>\n\n\n\n
\u73b0\u5728\u5c31\u53ef\u4ee5\u5f00\u59cb\u8fdb\u884c\u6109\u5feb\u7684\u626b\u63cf\u4e86\uff0c\u4e0d\u8fc7\u5bb6\u5ead\u7248\u6700\u591a\u652f\u630116\u53f0\u4e3b\u673a<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u4e0b\u9762\u6765\u8ba9\u4f60\u7684nessus\u53d8\u6210\u65e0\u5ba2\u6237\u7aef\u9650\u5236\u7248\u672c,\u7f16\u8f91\/opt\/nessus\/var\/nessus\/plugin_feed_info.inc<\/strong><\/p>\n\n\n\n
#\u8fdb\u5165docker\ndocker exec -it nessus-pro \/bin\/bash\n#\u7f16\u8f91\u6587\u672c\uff0c\u5982\u679c\u6ca1\u6709\u5c31\u65b0\u5efa\nvi \/opt\/nessus\/var\/nessus\/plugin_feed_info.inc\nPLUGIN_SET = \"2022011020609\";\nPLUGIN_FEED = \"ProfessionalFeed (Direct)\";\nPLUGIN_FEED_TRANSPORT = \"Tenable Network Security Lightning\";\n#\u91cd\u542f\u670d\u52a1\nsupervisorctl stop nessusd\nsupervisorctl start nessusd<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
nessus\u4f1a\u4e0d\u5b9a\u671f\u66f4\u65b0\u6f0f\u6d1e\u5e93\uff0c\u6240\u4ee5\u6211\u4eec\u4e5f\u8981\u4e0e\u65f6\u4ff1\u8fdb\uff0c\u4e4b\u524d\u7ed9\u7684\u4e0b\u8f7d\u94fe\u63a5\u53ef\u4ee5\u4e00\u76f4\u7528\uff0c\u4e0d\u7528\u5fd8\u8bb0\u54e6\uff0c\u5426\u5219\u4e0b\u6b21\u8fd8\u8981\u4ece\u65b0\u8d70\u4e00\u904d\u6ce8\u518c\uff0c\u4e0d\u8fc7\u6bcf\u6b21\u66f4\u65b0\u5b8c\u5c31\u4f1a\u56de\u5f52\u5bb6\u5ead\u7248\uff0c\u8fd9\u65f6\u5019\u4ece\u65b0\u6267\u884c\u4e0a\u8ff0\u6b65\u9aa4\u5373\u53ef<\/p>\n\n\n\n
#\u4e0b\u8f7d\u63d2\u4ef6\u5305\n\u6d4f\u89c8\u5668https:\/\/plugins.nessus.org\/v2\/nessus.php?f=all-2.0.tar.gz&u=f62aae31e2c498819633915xxxxxxxxx&p=bf5d257e62c621c5944a41xxxxxxxxx\n#\u628a\u5305\u4f20\u5165docker\ndocker cp all-2.0.tar.gz nessus-pro:\/mnt\n#\u8fdb\u5165docker\ndocker exec -it nessus-pro \/bin\/bash\n#\u66f4\u65b0\u63d2\u4ef6\n\/opt\/nessus\/sbin\/nessuscli update \/mnt\/all-2.0.tar.gz\n#\u6bcf\u6b21\u66f4\u65b0\u4f1a\u5237\u65b0plugin_feed_info.inc\uff0c\u7f16\u8f91\u6587\u672c\nvi \/opt\/nessus\/var\/nessus\/plugin_feed_info.inc\nPLUGIN_SET = \"2022011020609\";\nPLUGIN_FEED = \"ProfessionalFeed (Direct)\";\nPLUGIN_FEED_TRANSPORT = \"Tenable Network Security Lightning\";\n#\u91cd\u542f\u670d\u52a1\nsupervisorctl stop nessusd\nsupervisorctl start nessusd<\/pre>\n","protected":false},"excerpt":{"rendered":"
Nessus\u7b80\u4ecb Nessus\u662f\u4e00\u4e2a\u529f\u80fd\u5f3a\u5927\u800c\u53c8\u6613\u4e8e\u4f7f\u7528\u7684\u8fdc\u7a0b \u5b89\u5168\u626b … \u7ee7\u7eed\u9605\u8bfb →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-322","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=322"}],"version-history":[{"count":3,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/322\/revisions"}],"predecessor-version":[{"id":753,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/322\/revisions\/753"}],"wp:attachment":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}