Activity 11.1: Nessus Vulnerability Scan
This activity teaches you how to perform a basic vulnerability scan with the Tenable Nessus vulnerability scanner. You will learn to conduct a non-credentialed, agentless scan, where no login credentials will be used, and no agents will be installed on the asset being scanned. The target for this scan will be your Metasploitable VM, set up in Chapter 1, IAM, Logging, and Security Architecture, which is a vulnerable virtual machine designed for testing security tools and techniques.
In this exercise, you will complete three main tasks:
- Start the Metasploitable VM: This VM will serve as the target for the vulnerability scan.
- Install and configure Tenable Nessus Essentials and run a scan: Set up Nessus, which will be used to scan the Metasploitable VM for potential vulnerabilities.
- Explore the results: Analyze the scan results to understand the detected vulnerabilities.
By the end of this activity, you will have hands...
