Nessus - best bet and where to get?

**ivrytwr3** · 14th June 2014

I'm mid-course and in the next few weeks the course leader is going to publish an IP address/web address and we have to Pen Test and provide what vulnerabilities there are and how to exploit them.

I'm not an uber geek, but a root around the net points me towards Nessus as a one stop shop for this.

Any recommendations or is Nessus what I am after?

Also, there is a very hefty price tag on this software, anyone know where I can get it

Or will the 7 day trial currently offered be sufficient?

Ta for looking!

**blacksheep** · 17th June 2014

How in depth does it have to be? I'd guess the course materials should steer you towards the sort of techniques you want to use but port scan to look for open ports and then go from there.

**reverend** · 18th June 2014

What course is it you're doing mate? I'm quite fancying getting back into this game and skilling up on the current stuff, just not sure where to start!

**ivrytwr3** · 18th June 2014

Digital Forensics and Ethical Hacking.

**blacksheep** · 20th June 2014

So are you looking to do man in the middle, packet sniffing, intrusion what?

**ivrytwr3** · 20th June 2014

Anything we want really! The parameters are we will be given and IP/address and we are to Pen Test it to discover up to 5 weaknesses, once discovered we are to exploit them. That's it.

I have metasploit and am looking for a step by step methodology/commands to do this. Looking at Nessus, this may do it too.

Wrt Wireshark I thought that was packet sniffing over wifi ie we won't be able to use it in this situation as the target is a distance away?

**reverend** · 20th June 2014

Wireshark sniffs any network interface no matter where it is mate - you just tell it to use the interface that has the internet connection and off you go.