Các trang tra cứu dns và ip tuyệt vời

Sau đây mình xin chia sẻ với các bạn 2 trang web dùng để tra cứu ip và dns,... mà mình rất tâm đắc
đó là trang http://whatismyipaddress.com/

và trang https://whois.domaintools.com .

 2 trang này có các công cụ tra cứu cực kỳ chất lượng bao gồm nhiều thứ, các bạn có thể tự khám phá. Mình cũng từng sử dụng nhiều trang khác như checkip.org hay whatismyip.com ,,,.. nói chung là rất nhiều trên mạng nhưng chất lượng và uy tín thì không bằng 2 trang này.
Bạn nào có trang khác chất lượng thì bình luận bên dưới nhé. Cám ơn.

Read More

19 Extension phục vụ Penetration Testing trên Google Chrome - 19 Extensions to Turn Google Chrome into Penetration Testing tool

Google Chrome Extensions for Security researchers and penetration testers

1. Web Developer,
   is a Google Chrome extension that adds a tool bar with various web development tools in Chrome. With these tools, users can perform various web development tasks. This extension helps analyzing web application elements like HTML and JS.
   Add Web Developer Extension in Chrome here: https://chrome.google.com/webstore/detail/web-developer/bfbameneiokkgbdmiekhjnmfkcnldhhm
2. Firebug Lite for Google Chrome, provides a rich visual environment to analyze HTML elements, DOM elements and other Box Model Shading. It also provides live CSS editing. It helps in analyzing how an application is working on the client’s side.Add Firebug Lite to Google Chrome: https://chrome.google.com/webstore/detail/firebug-lite-for-google-c/bmagokdooijbeehmkpknfglimnifench
3. d3coder, is another nice Google Chrome extension that helps penetration testers. It enables us to encode and decode selected text via context menu. Thus it reduces the time to encode and decode strings by using separate tools. This extension can perform a wide range of functions. See the list below:
   • Timestamp decoding
   • rot13 en-/decoding
   • base64 encoding
   • base64 decoding
   • CRC32 hashing
   • MD5 hashing
   • SHA1 hashing
   • bin2hex
   • bin2txt
   • HTML entity encoding
   • HTML entity decoding
   • HTML special chars encoding
   • HTML special chars decoding
   • URI encoding
   • URI decoding
   • Quoted printable decoding
   • Quoted printable encoding
   • Escapeshellarg
   • Base64 decode
   • Base64 encode
   • Unserialize
   • L33T-en/decode
   • Reverse
   Add d3coder extension to Google Chrome: https://chrome.google.com/webstore/detail/d3coder/gncnbkghencmkfgeepfaonmegemakcol?hl=en-US
4. Site Spider, is an extension that adds a crawler in Chrome. It crawls all pages and reports all broken links. One can also restrict the spider by adding restrictions and regular expressions, it works at the client’s side. It can also use your authentication to access all pages. This extension is opensource. So, you can easily modify it according to your needs.
   Add Site Spider to Google Chrome: https://chrome.google.com/webstore/detail/site-spider/ddlodfbcplakmddhdlffebcggbbighda
5. Form Fuzzer, is used to populate predefined characters into different form fields. It can also select checkboxes, radio buttons and select items in forms. It has a configuration menu where you can manage all settings of the extension. It is really helpful in testing forms. You can set payloads for forms and then populate payloads quickly with this nice tool. Really helpful in performing XSS and SQL injection attacks.
   Add Form Fuzzer to Google Chrome: https://chrome.google.com/webstore/detail/form-fuzzer/cbpplldpcdcfejdaldmnfhlodoadjhii
6. Session Manager, is a powerful Chrome extension that lets users save, update, restore, and remove sets of tabs. You can create a group of tabs of the same interest and then restore those pages in one click. If you open few specific pages daily, and create groups of those pages and then open with a single click.
   Add Session Manager to Google Chrome: https://chrome.google.com/webstore/detail/session-manager/mghenlmbmjcpehccoangkdpagbcbkdpc
7. Request Maker, is a core penetration testing tool. It’s used in creating and capturing requests, tampering the URL, and making new headers with post data. It can capture requests made via forms or XMLHttpRequests. You can see the function of this tool is similar to Burp. It’s also helpful in performing various kind of attacks in a web applications by modifying http requests.
   Add Request Maker to Google Chrome: https://chrome.google.com/webstore/detail/request-maker/kajfghlhfkcocafkcjlajldicbikpgnp
8. Proxy SwitchySharp, is a proxy extension that helps in managing and switching between multiple proxies quickly. It also has an option to set auto proxy switching based on URL. You can also import or export data easily. With proxy switcher, we can hide IP addresses and perform penetration testing tasks to check how a person can attack with proxy servers.
   Add Proxy SwitchySharp to Google Chrome: https://chrome.google.com/webstore/detail/proxy-switchysharp/dpplabbmogkhghncfbfdeeokoefdjegm/details
9. Cookie Editor, is a nice Chrome extension that lets users edit cookies. This tool is really helpful while hijacking vulnerable test sessions. It lets users delete, edit, add/or search cookies. It also lets users protect, block or export cookies in json. You can play with cookies as you want. This extension is ad-supported and all revenue goes to Unicef to help children worldwide. But Ads are not necessary and you can disable anytime from the extension settings page.
   Add Edit This Cookie to Google Chrome: https://chrome.google.com/webstore/detail/edit-this-cookie/fngmhnnpilhplaeedifhccceomclgfbg
10. Cache Killer, is another nice extension that automatically cleans the browser cache before loading pages. It can be easily enabled or disabled with a single mouse click. It’s useful to bypass the browser cache and see the exact website in case it’s changing. This is much useful for web developers.
    Add Cache Killer Extension to Google Chrome: https://chrome.google.com/webstore/detail/cache-killer/jpfbieopdmepaolggioebjmedmclkbap
11. XSS Rays, is a nice extension that helps in finding XSS vulnerability in a website. It finds how a website is filtering the code. It also checks for injections and inspects objects. You can also easily extract, view and edit forms non-destructively even if forms cannot be edited. So many penetration testers use this extension as a dedicated XSS testing tool. It’s pure JavaScript XSS scanner. You can read more about XSS Rays here.
    Add XSS rays to Google Chrome: https://chrome.google.com/webstore/detail/xss-rays/kkopfbcgaebdaklghbnfmjeeonmabidj
12. WebSecurify, is a powerful cross platform web security testing tool. It’s available for various desktop, mobile platforms and browsers. This is the first web security tool that runs directly from the browser. It’s capable of finding XSS, XSRF, CSRF, SQL Injection, File upload, URL redirection and various other security vulnerabilities. It has a built in crawler that scans and crawls pages. Then it will try to find vulnerability on pages. It’s not a fully automatic tool. It lists possible vulnerability on the URL. You will need to confirm the vulnerability manually. We have already covered the websecurify tool in detail. You can check older posts to read more on how this tool works and how to master websecurify for penetration testing. While scanning, it pulls all features from the WebSecurify server, so you do not need to worry about database updates. The vulnerability engine will be updated at all times. Penetration testing tools are just a click away. Use this either as a browser tool or desktop tool.
    Add Websecurify to Google Chrome: https://chrome.google.com/webstore/detail/websecurify/gbecpbaknodhccppnfndfmjifmonefdm
13. Port Scanner, Google Chrome extension adds port scanning capabilities to the browser. With this extension, you will be able to scan which TCP ports are listening. Port Scanner analyzes any given IP or URL addresses, and then will scan for open ports to help you to secure them. It is also available for Opera and Mozilla Firefox.
    Add Port Scanner to Google Chrome: https://chrome.google.com/webstore/detail/port-scanner/jicgaglejpnmiodpgjidiofpjmfmlgjo
14. XSS chef, is the popular Chrome extension that works directly in the browser. It helps us in identifying XSS vulnerability in a web application. It’s similar to BeEF but for browsers. It performs following tasks:
    • Monitor open tabs of victims
    • Execute JS on every tab (global XSS)
    • Extract HTML, read/write cookies (also httpOnly), local Storage
    • Get and manipulate browser history
    • Stay persistent until whole browser is closed (or even further if you can persist in extensions’ local Storage)
    • Make screenshot of victims window
    • Further exploit e.g. via attaching BeEF hooks, keyloggers etc.
    • Explore filesystem through file:// protocol
    • Bypass Chrome extensions content script sandbox to interact directly with page JS
    This is not an extension but a framework. So, installation is not same as any other extension. Read the official link of XSS Chef given below and learn how to install it in Chrome.
    Add XSS chef to Google Chrome: https://github.com/koto/xsschef
15. HPP Finder, is another nice extension. It is useful in finding HTTP Parameter Pollution (HPP) vulnerability and exploit it. This tool can easily detect and exploit the HTML Forms or URLs that might be susceptible of HTTP Parameter Pollution attacks. This tool can only find the vulnerability points but is not a solution against the vulnerability.Add HPP Finder in Google Chrome: https://chrome.google.com/webstore/detail/hpp-finder/nogojgcobcolombicplhimbbakkcmhio
16. The Exploit Database, is not a penetration testing tool, but it keeps you updated with all latest exploits, shell code and white papers available on Exploit DB server. It’s an open source tool and source code can be found here: http://github.com/10n1z3d/EDBEAdd The Exploit Database extension in chrome: https://chrome.google.com/webstore/detail/the-exploit-database/lkgjhdamnlnhppkolhfiocgnpciaiane
17. GHDB, is a nice Google hack query search. This nice extension help you in searching for necessary Google hack querys for finding specific pages based on special Google search parameters. It allows you in understanding the basis of web security in a better way.
    Add GHDB in Google Chrome: https://chrome.google.com/webstore/detail/ghdb/jopoimgcafajndmonondpmlknbahbgdb
18. iMacros for Chrome, while performing various web page testing processes, you may need to automate few repetitive tasks on the web. For this, you can use iMacros for Chrome extensions. So, next time when you need this kind of thing, Use the macro and then start it with a click button.Install iMacros for Chrome in Chrome: https://chrome.google.com/webstore/detail/imacros-for-chrome/cplklnmnlbnpmjogncfgfijoopmnlemp
19. IP Address and Domain Information, is an information gathering extension that can help you in finding geolocation, DNS, whois, routing, search results, hosting, domain neighbors, DNSBL, BGP and ASN information of every IP address (IPv4 and IPv6).Add it to Chrome: https://chrome.google.com/webstore/detail/ip-address-and-domain-inf/lhgkegeccnckoiliokondpaaalbhafoa

How to Install Chrome Extension in the browser

Installation of extension is one click process if it is available in the official Chrome store. But it may be confusing if you have extension code only.
Install from Official Chrome store: To install the extension from official chrome store, just click on the link given below each extension and open the chrome store page of the extension. You will see a blue button saying, “Add to Chrome.”

Figure: Chrome Extension Installation Button

After clicking this button, installation will begin and you will not need to do anything else. It will download a file and then add it to your Chrome. By default, it will activate the extension.
Install Extension manually with source file: Few extensions are not available on official chrome store because they do not meet the terms and conditions of store. So, these are available unofficially on their website. If you want to install those extensions, then download it from the official website. Now open the Chrome extension page and drag the source file and drop it on the extension page. Extension will install automatically after dropping on extensions page.
Ethical Hacking Training
If you want to deactivate an extension from Chrome, go to settings and then Extensions page. Here you will see the installed extensions. In front of each extension, you will see a check box. To disable the extension, you only need to de-select the select box. To remove the extension permanently, click on the trash icon near the check box.

Figure: Chrome Extension enable/disable

Conclusion

After reading this post, you will come to know that Chrome is more than just a browser. With these nice extensions, it will become the friend of penetration testers and security researchers. Install these extensions in your browsers and start your penetration testing process. These tools include a wide range from gathering information to performing attacks. Few tools can be used to gather information and inspect the header information of a request. XSS Rays, XSS Chef, HPP Finder and WebSecurify are the most helpful tools that are used widely as security tools.
At last I have also added exploit tools to search for vulnerability, shells and white papers. You can use the exploit search extension to search for an exploit and use it while performing attacks.
Use these tools and share your experience with us. Share which extension you like most via comments.

Nguồn: http://resources.infosecinstitute.com/

Read More

Những việc cần làm sau khi cài đặt kali linux-Things to do after installing Kali Linux

Kali linux là hệ điều hành chứa những bộ công cụ cực kì hữu dụng cho việc penetration testing, nhiều bạn mới làm quen với backtrack/kali cảm thấy bỡ ngỡ và mong muốn làm sao để nó có thể trở thành một hệ điều hành chính có thể thay thế windows để tiện cho việc học tập giải trí và nghiên cứu hacking, dưới đây mình tổng hợp một số phần mềm cần thiết và cách cài sau khi cài đặt kali, hi vọng sẽ giúp ích cho các bạn.

Mình liệt kê 20 điều mà mình thấy cần thiết giúp các bạn có thể sử dụng kali như một OS bình thường với đầy đủ các tiện ích học tập, giải trí.

1. Chỉnh sửa sources.list
2. Install Software center
3. Install Mozilla firefox
4. Install Adobe Flash Player
5. Install Virtual Box
6. Install Skype
7. Install Teamviewer
8. Install ibus-unikey(bộ gõ Tiếng Việt)
9. Add and remove standard user(non-root)
10. Setup and configure vpn in kali linux
11. Install AptonCD - Create a backup of all the packages you have installed using apt-get
12. Fix Database not connected or cache not built, using slow search" error in Metasploit
13. Install java JDK 7
14. Install Jdownloader
15.1 How to hide show/hide all desktop icons on kali linux
15.2 How to auto hide bottom panel
16. Install pinta images editor(Trình chỉnh sửa ảnh nhỏ gọn như pain trong windows)
17. Install and run Google Chrome as root user
18. Installer for Microsoft TrueType core fonts(Add Aria, Times New Roman, Verdana,...etc font)
19. Install sopcast player (Phần mềm không thể thiếu dành cho các bạn yêu bóng đá)
20. Install & Run Nessus Vulnerability Scanner

1. Chỉnh sửa sources.list
Sau khi cài đặt kali, một điều làm mọi người phiền lòng là tốc độ mà nó update dữ liệu từ máy chủ quá chậm, để khắc phục điều này, các bạn mở sources.list bằng lệnh
Mã:
leafpad /etc/apt/sources.list

Tiếp theo các bạn thay thế nội dung trong đó bằng đoạn text sau:

Mã:

## Kali Regular repositories
deb http://repo.kali.org/kali kali main non-free contrib
deb http://security.kali.org/kali-security kali/updates main contrib non-free
## Kali Source repositories
deb-src http://repo.kali.org/kali kali main non-free contrib
deb-src http://security.kali.org/kali-security kali/updates main contrib non-free

Nếu bạn không thấy sự cải thiện thì có thể dùng đoạn text sau để thay thế, nó sẽ sửa server update sang Anh, bình thường server update là của tung của rất hay bị mất kết nối :(

Mã:

## Kali Regular repositories
deb http://ftp.hands.com/kali kali main non-free contrib
deb http://ftp.hands.com/kali-security kali/updates main contrib non-free
## Kali Source repositories
deb-src http://ftp.hands.com/kali kali main non-free contrib
deb-src http://ftp.hands.com/kali-security kali/updates main contrib non-free

Để thay thế nhiều server khác nhau, vui lòng đọc bài viết này
http://www.blackmoreops.com/2013/11/14/c...nt-mirror/

Sau khi update và upgrade xong, các bạn thay thế nội dung trong file soures.list lại bằng sources mặc định sau:

Mã:

## Kali Regular repositories
deb http://http.kali.org/kali kali main non-free contrib
deb http://security.kali.org/kali-security kali/updates main contrib non-free
## Kali Source repositories
deb-src http://http.kali.org/kali kali main non-free contrib
deb-src http://security.kali.org/kali-security kali/updates main contrib non-free

Lí do là vì sources mặc định này sẽ cập nhật các bản/công cụ từ nhà sản xuất sớm hơn so với các server khác, ví dụ chẳng hạn như server mặc định này có bản vá lỗi của metaploit flamework trong khi các server khác thì chưa có.

2. Install Software center

Mã:

apt-get update
apt-get upgrade
apt-get install software-center

3. Install Mozilla firefox

Mã:

apt-get remove iceweasel
echo -e "\ndeb http://downloads.sourceforge.net/project/ubuntuzilla/mozilla/apt all main" | tee -a /etc/apt/sources.list > /dev/null
apt-key adv --recv-keys --keyserver keyserver.ubuntu.com C1289A29
apt-get update
apt-get install firefox-mozilla-build

4. Install Adobe Flash Player
4.1 Download Adobe Flash Player at http://get.adobe.com/flashplayer/?promoid=JZEFT
4.2 Type the command lines follow:

Mã:

cd /root/Downloads/

continue...
tar xzvf [file name of Adobe Flash Player], example:

Mã:

tar xzvf install_flash_player_11_linux.i386.tar.gz

Mã:

cp libflashplayer.so /usr/lib/mozilla/plugins/

5. Install Virtual Box
5.1 Download Virtual Box at https://www.virtualbox.org/wiki/Linux_Downloads
5.2 Type the command lines follow:

Mã:

apt-get update && apt-get install -y linux-headers-$(uname -r)
cd /root/Downloads/

dpkg -i [file name Virtual Box], example:

Mã:

dpkg -i virtualbox-4.3_4.3.12-93733~Debian~wheezy_i386.deb

6. Install Skype
6.1 Download skype at http://www.skype.com/en/download-skype/s...-computer/
6.2 Type the command lines follow:

Mã:

cd /root/Downloads/

dpkg -i [file name of Skype], example:

Mã:

dpkg -i skype-debian_4.2.0.13-1_i386.deb

7. Install Teamviewer
7.1 Download Teamviewer at http://download.teamviewer.com/download/..._linux.deb
7.2 Type the command lines follow:

Mã:

cd /root/Downloads/

dpkg -i [file name of Teamviewer], example:

Mã:

dpkg -i teamviewer_linux.deb

8. Install ibus-unikey(bộ gõ Tiếng Việt)

Mã:

apt-get install ibus im-switch
apt-get install ibus-unikey

#im-switch -s ibus
# logout and re-login

Mã:

ibus-setup # add input methods you want

9. Add and remove standard user(non-root)
Add:

Mã:

useradd -m user1 //replace user1 with your desired user name

(Note: -m means create home directory which is usually /home/username)

Now set password for this user:

Mã:

passwd user1

Add user to sudo group (to allow user to install software, allow printing, use privileged mode etc.) :

Mã:

usermod -a -G sudo user1

(Note: -a means append or add and –G mean to specified group/groups)

Change default shell of previously created user to bash :

Mã:

chsh -s /bin/bash user1

(Note: chsh mean change login shell, -s is the name of the specified shell you want for the user, in this case /bin/bash)

Nice, all worked out as expected.
Let’s logout and login back as our new Standard Non-root user (user1)

Login as new user:
Become root!:

Mã:

sudo su –

Delete user in Kali Linux:
Log in as root user again. Open your terminal and type:

Mã:

userdel –r user1

(Note: -r means delete all files and home directory for user1)
You can replace user1 with your desired user name.

I have an error “user1 is currently used by process 5866”.
Don't worry, fix it by terminal type:

Mã:

kill -9 5866

Now let’s try to delete the user again.

Mã:

userdel –r user1

We have a message. “userdel: user1 mail spool (/var/mail/user1) not found”

Just to confirm everything for user1 was deleted list files in home directory

Mã:

ls /home

Nothing.. that’s good news, all files and folders were deleted for user1.

Want to double-check?

Mã:

su user1

Perfect user1 was deleted successfully.

10. Setup and configure vpn in kali linux

Mã:

apt-get install network-manager-openvpn
apt-get install network-manager-openvpn-gnome
apt-get install network-manager-pptp
apt-get install network-manager-pptp-gnome
apt-get install network-manager-strongswan
apt-get install network-manager-vpnc
apt-get install network-manager-vpnc-gnome
/etc/init.d/network-manager restart

11. Install AptonCD - Create a backup of all the packages you have installed using apt-get

Mã:

apt-get install aptoncd

12. Fix Database not connected or cache not built, using slow search" error in Metasploit

Mã:

service postgresql start

OR

Mã:

#/etc/init.d/postgresql start

Mã:

service metasploit start

OR

Mã:

#/etc/init.d/metasploit start

Mã:

apt-get update
apt-get upgrade

One more thing... If you want postgreSQL and Metasploit services to auto start whenever you boot into Backtrack or Kali, you can issue the following commands on the root terminal:

Mã:

update-rc.d postgresql enable
update-rc.d metasploit enable

13. Install java JDK 7

13.1 Download the latest Java SE SDK version at http://www.oracle.com/technetwork/java/j...80260.html
Các bạn lưu file download vào thư mục /root

13.2 UnTar the Archive and move to /opt

Mã:

tar -xzvf /root/jdk-7u45-linux-x64.tar.gz
mv jdk1.7.0_45 /opt
cd /opt/jdk1.7.0_45

14.3 Install and register binaries

Mã:

update-alternatives --install /usr/bin/java java /opt/jdk1.7.0_45/bin/java 1
update-alternatives --install /usr/bin/javac javac /opt/jdk1.7.0_45/bin/javac 1
update-alternatives --install /usr/lib/mozilla/plugins/libjavaplugin.so mozilla-javaplugin.so /opt/jdk1.7.0_45/jre/lib/amd64/libnpjp2.so 1
update-alternatives --set java /opt/jdk1.7.0_45/bin/java
update-alternatives --set javac /opt/jdk1.7.0_45/bin/javac
update-alternatives --set mozilla-javaplugin.so /opt/jdk1.7.0_45/jre/lib/amd64/libnpjp2.so

13.4 Test
First of all, close your browser and re-open, access to http://www.java.com/en/download/installed.jsp

Mã:

java -version

Lưu ý bản java SE JDK mới nhất là bản 8, lệnh thì tương tự nhưng các bạn phải sửa một số đường dẫn đến các file sao cho phù hợp, các bạn tùy cơ ứng biến nhé :)

14. Install Jdownloader
14.1 Download jdownloader as http://jdownloader.org/
14.2 Install:

Mã:

chmod +x jd_unix_0_9.sh && ./jd_unix_0_9.sh

15.1 How to hide show/hide all desktop icons on kali linux
Open your terminal and type:

Mã:

gsettings set org.gnome.desktop.background show-desktop-icons false

15.2 How to auto hide bottom panel

Access to applications/System tools/deconf Editor/org/gnome/gnome-panel/layout/toplevels/bottom-panel, check auto hide

16. Install pinta images editor(Trình chỉnh sửa ảnh nhỏ gọn như pain trong windows)

Mã:

apt-get install pinta

Trên linux thì có trình chỉnh sửa ảnh GIMP, được ví như photoshop thứ 2, cài đặt bằng lệnh

Mã:

apt-get install gimp

17. Install and run Google Chrome as root user
17.1 Download Google Chrome at http://www.google.com.vn/intl/vi/chrome/browser/
17.2 Install by the command lines:

Mã:

cd /root/Downloads/

dpkg -i [file name of Chrome], example:

Mã:

dpkg -i google-chrome-stable_current_i386.deb

17.3 Run Chrome as root user

Mã:

leafpad /opt/google/chrome/google-chrome

Find a line:

Mã:

exec -a "$0" "$HERE/chrome"  "$@"

Replace it to

Mã:

exec -a "$0" "$HERE/chrome"  "$@" --user-data-dir ”/root/.config/google-chrome”

Enjoy! Now open google chrome from Application>>Internet>>Google Chrome

18. Installer for Microsoft TrueType core fonts(Add Aria, Times New Roman, Verdana,...etc font)

Mã:

apt-get install ttf-mscorefonts-installer

19. Install sopcast player (Phần mềm không thể thiếu dành cho các bạn yêu bóng đá)
Đầu tiên các bạn tải sp-auth tại đây
Tiếp theo cài đặt nó bằng lệnh

Mã:

cd /root/Downloads/
dpkg -i sp-auth_3.2.6~ppa1~precise3_i386.deb
apt-get -f install

Tiếp theo các bạn tải về sopcast 0.8.5 tại đây
Cài đặt nó bằng lệnh

Mã:

dpkg -i sopcast-player_0.8.5~ppa~precise1_i386.deb
apt-get -f install

Ok, vậy là công việc cài đặt đã hoàn tất, giờ bạn chỉ việc khởi động nó ở Applications => Sound & Videos =>Sopcast Player là đã có thể thưởng thức bóng đá và các chương trình tv, thể thao khác,v..v...
Lưu ý là link sopcast các bạn phải tự add bằng tay chứ nó không tự động chạy như trong windows đâu.

20. Install & Run Nessus Vulnerability Scanner

20.1 Download Nessus is here http://www.tenable.com/products/nessus/s...ing-system, bản mới nhất là 5.2.7
20.2 Cài đặt nó:

Mã:

cd /root/Downloads/

dpkg -i "deb packet name", example:

Mã:

dpkg -i Nessus-5.2.7-debian6_i386.deb

Vậy là việc cài đặt nessus vào máy đã thành công.
20.3 Khởi chạy:

Mã:

/etc/init.d/nessusd start

-Tiếp theo các bạn mở trình duyệt web và truy cập đến địa chỉ https://host name:8834, nếu trong quá trình cài đặt kali bạn không thay đổi thì nó là https://kali:8834
-Nhấn tiếp tục nếu xuất hiện cảnh báo
-Chọn Tiếp Get started
-Nhập vào mật khẩu và tài khoản đăng nhập nessus, chọn next
-Ở bước này, nessus sẽ yêu cầu bạn nhập activation code, bạn truy cập vào đây, chọn bản nessus home, điền email để nhận code
-Sau khi điền code, Tiếp tục chọn Next==>Download Plugins, chờ một lát(cũng khá lâu  ) để nó download và initializing các plugins cần thiết.
-Tiếp theo, màn hình đăng nhập của nessus xuất hiện, bạn nhập tài khoản và mật khẩu để đăng nhập
ok, susscess!

Read More