Nessus Network Auditing

ForewordChapter 1 Vulnerability Assessment Introduction What Is a Vulnerability Assessment? Why a Vulnerability Assessment? Assessment Types Automated Assessments Stand-Alone vs. Subscription The Assessment Process Two Approaches Administrative Approach The Outsider Approach The Hybrid Approach Realistic Expectations The Limitations of Automation Summary Solutions Fast Track Frequently Asked QuestionsChapter 2 Introducing Nessus Introduction What Is It? The De Facto Standard History Basic Components Client and Server The Plugins The Knowledge Base Summary Solutions Fast Track Frequently Asked QuestionsChapter 3 Installing Nessus Introduction Quick Start Guide Nessus on Linux (suse/redhat/mandrake/gentoo/debian) Nessus on Solaris Picking a Server Supported Operating Systems Minimal Hardware Specifications Network Location Source or Binary Installation from Source Software Prerequisites Obtaining the Latest Version The Four Components ./configure Configuring Nessus Creating the User Account Installing a Client Using the GTK Client Using the Windows Client Command-Line Mode Updating to the Latest Plugins Summary Solutions Fast Track Frequently Asked QuestionsChapter 4 Running Your First Scan Introduction Preparing for Your First Scan Authorization Risk vs. Benefit Starting the Nessus Client Plugins Enable Specific Plugins Using the Plugin Filter Plugin Categories Plugin Information Preferences Specify the Host Ping Configuring WWW Checks NIDS Evasion Brute Force with Hydra The SMB Scope Configuring Login Credentials Configuring SNMP Configuring Nmap Scan Options The Port Range Unscanned Ports Performance: Host and Process Count Optimized Checks Safe Checks Mode Report by MAC Address (DHCP) Detached Scan Send Results to This E-mail Address Continuous Scan Configure the Port Scanner Ignore Top-Level Wildcard Host Target Selection How to Select Targets Common Scanning Issues (Printers, etc.