Centos、Redhat上如何安装Nessus安全扫描软件

在CentOS和Redhat上安装Nessus安全扫描软件

Nessus是一款非常流行的开源破绽扫描工具，它可以帮助我们检测网络中的安全破绽，本文将介绍如何在CentOS和Redhat上安装Nessus安全扫描软件。

准备工作

1、获取Nessus安装包

我们需要从官方网站下载Nessus的安装包，访问https://www.tenable.com/downloads/nessus，选择适合你的操作系统的版本进行下载。

2、安装依赖库

在安装Nessus之前，我们需要先安装一些依赖库，对于CentOS和Redhat，可以使用以下命令安装：

sudo yum install -y glibc glibc-common glibc-devel glibc-headers glibc-utils glibc-static glibc-devel glibc-headers glibc-utils glibc-static make ncurses-devel zlib-devel openssl-devel perl perl-Data-Dumper perl-XML-Parser perl-SysConfig sysstat unixODBC unixODBC-devel

安装Nessus

1、解压Nessus安装包

将下载好的Nessus安装包解压到一个目录，例如/opt：

sudo tar -xvf nessus-xxxx.tar.gz -C /opt

2、创建Nessus用户和组

为了运行Nessus，我们需要创建一个名为nessus的用户和一个名为nessus的组：

sudo groupadd nessus
sudo useradd -g nessus -m nessus

3、更改Nessus目录权限

将Nessus目录的所有者更改为nessus用户和组：

sudo chown -R nessus:nessus /opt/nessus

4、设置环境变量

为了让系统识别Nessus，我们需要设置一些环境变量，编辑/etc/profile文件，添加以下内容：

export NESSUS_USER=nessus
export NESSUS_GROUP=nessus
export NESSUS_HOME=/opt/nessus
export PATH=$PATH:$NESSUS_HOME/bin:$NESSUS_HOME/plugins64:$NESSUS_HOME/plugins64/bin:$NESSUS_HOME/lib64:$NESSUS_HOME/lib64/bin:$NESSUS_HOME/scripts:$NESSUS_HOME/scripts/bin:$NESSUS_HOME/win64:$NESSUS_HOME/win64/bin:$NESSUS_HOME/doc:$NESSUS_HOME/examples:$NESSUS_HOME/plugins:$NESSUS_HOME/plugins/bin:$NESSUS_HOME/lib:$NESSUS_HOME/lib/bin:$NESSUS_HOME/samples:$NESSUS_HOME/samples/bin:$NESSUS_HOME/templates:$NESSUS_HOME/templates/bin:$NESSUS_HOME/data:$NESSUS_HOME/data/bin:$NESSUS_HOME/macros:$NESSUS_HOME/macros/bin:$NESSUS_HOME/libexec:$NESSUS_HOME/libexec/bin:$NESSUS_HOME/sbin:$NESSUS_HOME/sbin/bin:$NESSUS_HOME/var:$NESSUS_HOME/var/bin:$NESSUS_HOME/tmp:$NESSUS_HOME/tmp/bin:$NESSUS_HOME/logs:$NESSUS_HOME/logs/bin:$NESSUS_HOME/certs:$NESSUS_HOME/certs/bin:$NESSUS_HOME/config:$NESSUS_HOME/config/bin:$NESSUS_HOME/etc:$NESSUS_HOME/etc/bin:$NESSUS_HOME/usr:$NESSUS_HOME/usr/bin:$NESSUS_HOME/varlib:$NESSUS_HOME/varlib/bin:$NESSUS_HOME/varrun:$NESSUS_HOME/varrun/bin:$NESSUS_HOME/varlock:$NESSUS_HOME/varlock/bin:$NESSUS_HOME/run:$NESSUS_HOME/run/bin:$NESSUS_HOME/init.d:$NESSUS_HOME/init.d/bin:$NESSUS_HOME/rc.d:$NESSUS_HOME/rc.d/bin:$NESSUS_HOME/init.d:$NESSUS_HOME/init.d/bin:$NESSUS_HOME/rc.d:$NESSUS_HOME/rc.d/bin:$NESSUS_HOME/init.d:$NESSUS_HOME//init.d//bin:$NESSUS_HOME//rc.d//bin:$NESSUS_HOME//init.d//bin:$NESSUS_HOME//rc.d//bin

5、初始化Nessus数据库

运行以下命令初始化Nessus数据库：

cd $NESSUS_HOME && sudo bin64/nsessusd --register --accepteula --force --sysadmin-username admin --sysadmin-password changeme --output /var/log/nessus --pid-file /var/run/nessusd.pid --background --consolelog --connect-timeout 60 --loglevel info --debuginfo --newui --noclientupdatecheck --noremediationcheck --nosavenewscanresults --nosaveoldscanresults --nosavetargetresults --nosavepolicyresults --nosavepluginresults --nosavereportresults --nosavecredentialresults --nosaveusergroupresults --nosaveuserpreferences --nosaveusersettings --nosaveusercategories --nosaveusernotificationpreferences --nosaveusernotificationsettings --nosaveusernotificationfilters --nosaveusernotificationservers --nosaveusernotificationevents --nosaveusernotificationeventtypes --nosaveusernotificationeventdestinations --nosaveusernotificationeventdestinationusers --nosaveusernotificationeventdestinationgroups --nosaveusernotificationeventdestinationservers --nosaveusernotificationeventdestinationserverusers --nosaveusernotificationeventdestinationservergroups --nosaveusernotificationeventdestinationservergroupusers --nosaveusernotificationeventdestinationservergroupserverusers --nosaveusernotificationeventdestinationservergroupserverusersets --nosaveusernotificationeventdestinationservergroupserverusersetsets --nosaveusernotificationeventdestinationservergroupserverusersetsetsets --nosaveusernotificationeventdestinationservergroupserverusersetsetsetsets --nosaveusernotificationeventdestinationservergroupserverusersetsetsetsetsets --nosaveusernotificationeventdestinationservergroupserverusersetsetsetsetsetsets --nosaveusernotificationeventdestinationservergroupserverusersetsetsetsetsetsetsets --nosaveusernotificationeventdestinationservergroupserverusersetsetsetsetsetsetsetsets --nosaveusernotificationeventdestinationservergroupserverusersetsetsetsetsetsetsetsetsets --nosaveuserdashboardpreferences --nosaveuserdashboardsettings --nosaveuserdashboardwidgetpreferences --nosaveuserdashboardwidgetsettings --nosaveuserdashboardwidgetlayoutpreferences --nosaveuserdashboardwidgetlayoutsettings --nosaveuserdashboardwidgetcontentpreferences --nosaveuserdashboardwidgetcontentsettings --nosaveuserdashboardwidgetcontentitemspreferences --nosaveuserdashboardwidgetcontentitemssettings --nosaveuserdashboardwidgetcontentitemslayoutpreferences --nosaveuserdashboardwidgetcontentitemslayoutsettings --nosaveuserdashboardwidgetcontentitemslayoutitempreferences --nosaveuserdashboardwidgetcontentitemslayoutitemsettings --nosaveuserdashboardwidgetcontentitemslayoutitemiconpreferences --nosaveuserdashboardwidgetcontentitemslayoutitemiconsettings --nosaveuserdashboardwidgetcontentitemslayoutitemiconcolorpreferences --nowritesyslog | tee /var