Nessus - ArchWiki

Jump to content

Nessus is a proprietary vulnerability scanner available free of charge for personal use. There are over 40,000 plugins covering a large range of both local and remote flaws.

## Installation

Install the nessusAUR package.

## Usage

Start/enable `nessusd.service`.

Access the web interface at https://localhost:8834 and/or use the commandline interface (`/opt/nessus/sbin/nessuscli`). In most browsers, you will need to manually accept the SSL certificate you created for the server.

## License

Register your email at the tenable site and wait for your key to be emailed to you.

Stop `nessusd.service` before doing anything with `nessuscli`.

Activate the license:

    # nessuscli fetch --register Activation Code

View your current license activation code:

    # nessuscli fetch --code-in-use

## Plugins update

Stop `nessusd.service` before doing anything with `nessuscli`.

Update the plugins:

    # nessuscli update --plugins-only

## Removal

The package can be removed with pacman, but files created by Nessus, such as the plugin database it downloads, must be removed manually:

Note: This will delete your Nessus configuration files.

    # rm -r /opt/nessus

## See also

- The multilanguage official documentation

Categories:

- Networking
- Security testing