And once everything has been downloaded, installed, and put into play by Nessus
for its initial configuration,
you will get an alert at the top right of the screen that says plugins are done
compiling.
If you are using a trial key, you will also get a notification on when your
trial is expiring, and you may get the option of either purchasing or renewing
the license if you access the skill past the trial period.
But we have already covered that in traveling back to the future in the past of
the skill.
Now after restarting, we go open Kelly back up and get back inside of our Ness
us.
This is post all the plugins being applied and everything and also this portion
of the skill.
We see that we are at the Welcome to Nessus page right here and have a question
for us.
And that is which targets are we going to be applying for our scope.
Now in the trial version of Nessus, we are limited to a certain number of IP
addresses that we can scan.
And this lab is not that big and we won't exceed that.
But whenever we have a fully licensed version of Nessus, we can actually put in
multiple targets based on IP address, singular or multiples in a cider notation
.
Or we can put dashes in there or we can have a fully qualified domain name in
there as well too.
Now we are going to kind of step away from the FQDNs for just a moment and base
this on actual IP addresses.
And first thing we need to do is make sure that we understand what our IP range
is.
We can do that by going into the actual Hyper-B manager.
Now I can tell you off the map that inside of this lab, it's going to be 192.
168.0.0/24.
And that is that full class C. But if you are, you're not really sure and you
want to double check, you can open up the Hyper-B manager and click on the
Networking Sub-Tab.
And you can see the IP addresses of the machines themselves just for a
verification.
Or you can do an IP config on the actual lab in here that's posted in the
actual Hyper-B manager.
So that being the case, we want to go ahead and identify that for this lab, we
're going to be scanning 192.168.0.0/24.
Now specifically, if you wanted to cut down on some of the guesswork, you would
put in the individual IP addresses.
Suck comma, sorry, had a little bit of a spammer there for a second.
And you would put in, let's say 50, 51, 52, which are the IP addresses of the
virtual machines that you see on the top right, right above.
But we're going to right now go for a full class C on here because that is our
range.
And for the purposes of this skill, the scope within our rule of engagement.
Now, it's going to do a preliminary scan of that actual subnet that we put in.
And this is very similar to what we have inside of our in-map for recon.
So essentially, NASA is performing step one and two of our pen testing lif
ecycle.
Now, you could see that we have host scan, host discovery results.
And these are going to be the only four that pop up within our results, even
though it's scanning for that whole class C.
And I'm going to check all four of them and go into the actual run scan.
This is the initial first scan that we're doing for our NASA setup inside of
our organization slash scope within the rules of engagement.
I'm going to go ahead and hit run scan now because I don't need to wait for
discovering more host because I know that's all we have.
Now, again, this is pretty much running just like a in-map scan just to be able
to tell us who's out there.
But now we want to go in and do an actual setup for an individual scan.
And we're going to let this one finish.
So I'm going to pause here and then I'll show you how to do a manual scan real
quick of a singular IP address or let's say multi.
Be right back.
Ah, one thing I wanted to tell you before I say before we take a break and come
right back into the next portion of this is.
Let's say you're not really sure if the scan is done or not.
Well, you could just simply click on back to my scans or on the left side to go
to my scans, which is just what I clicked.
And I'm going to pop out and show you here real quick that you see that there's
a double arrow circle right below the last scanned area of the scan results.
For the actual my basis scan, I like that row for you.
And you can see that that circle is still turning.
The reason for that is along with the awesome being there is that the scan is
still going.
So if you're curious and you hover over and see running, if the scan is done or
not, that's how you can tell.
And we can just click on that row and go back into the actual scan itself and
move over to the left and just wait for this initial scan based on our
discovery from the scope to be complete.