The click on HTTP Server type and Versionĥ.2 What authentication page is discovered by the scanner that transmits credentials in cleartext?īack to the Vulnerabilities of the scan. Open the scan by going to All scans and select the scan we just have createdĬlick on HTTP ( Multiple Issues) from webservers family This will take a whileĥ.1 What is the plugin id of the plugin that determines the HTTP server type and version? Go to My Scans and select New scan then Web application tests Click on All Scans and click the scan we just created Answer: Nessus SYN ScannerĤ.5 What Apache HTTP Server Version is reported by Nessus? What is this type called?Ĭlick on dicovery then under the scan type select Port scan (all ports) Answer: Port scan (all ports)Ĥ.3 What ‘Scan Type’ can we change to under ‘ADVANCED’ for lower bandwidth connectionĬlick on advanced en under scan type we see Scan low bandwidth links Answer: scan low bandwidth linksĤ.4 After the scan completes, which ‘Vulnerability’ in the ‘Port scanners’ family can we view the details of to see the open ports on this host? What option can we set under ‘BASIC’ (on the left) to set a time for this scan to run? This can be very useful when network congestion is an issue.Ĭlick on new scan then on Basic Network Scan Answer: ScheduleĤ.2 Under ‘DISCOVERY’ (on the left) set the ‘Scan Type’ to cover ports 1-65535. Just follow the guide in the task and you’ll be fineĢ.1 What is the name of the button which is used to launch a scan? Answer: New ScanĢ.2 What side menu option allows us to create custom templates? Answer: PoliciesĢ.3 What menu allows us to change plugin properties such as hiding them or changing their severity? Answer: Plugin RulesĢ.4 In the ‘Scan Templates’ section after clicking on ‘New Scan’, what scan allows us to see simply what hosts are alive?Ģ.5 One of the most useful scan types, which is considered to be ‘suitable for any host’?Ģ.6 What scan allows you to ‘Authenticate to hosts and enumerate missing updates’? Answer: Credentialed Patch AuditĢ.7 What scan is specifically used for scanning Web Applications? Answer: Web Application Testsīoot up the machine attached to this taskĤ.1 Create a new ‘Basic Network Scan’ targeting the deployed VM. This task will let you install Nessus on an Kali VM. Make connection with VPN or use the attackbox on Tryhackme site to connect to the Tryhackme lab environment Tasks Nessus This is the write up for the room Nessus on Tryhackme and it is part of the CompTIA Pentest+ Path

How to use nessus