Another Security Blog

A place to show my mad skills

TidBits Walkthroughs Resources Projects View on GitHub
21 March 2024

Nessus Vulnerability Management Lab

by C. Casquatch

We will be using Nessus Essentials to scan local VMs hosted on VMWare Workstation in order run credentialed scans to discover vulnerabilities, remediate some of the vulnerabilities, then perform a rescan to verify remediation.

Languages and Utilities Used
Environments Used

Program walk-through:

Turning off the firewall and creating a scan for the host

1

Enabling Remote Registry

2

Turning on printer and Netdiscovery

3

Screenshot of before VM configuration

4

Screenshot of after VM configuration

5

Scan after installing older version of firefox onto VM

6

Firefox Vulnerabilities

7

Firefox Remediation recommendations from Nessus

8

Firefox remediation in action: Updating Windows and deleting firefox

9

Nessus scan after Windows updates and Firefox deletion

10

Nessus remediation suggestions for last scan, if needed

11


tags: nessus - SIEM - lab - SOC