So here we are back in our Nesus interface on our Kali system.
And I wanted you to know that I'm doing this on a virtual machine
here local to this system.
So that way you can access the playground lab for the course overall
and continue your configurations and scanning methods from there.
Now you may notice on the bottom left real quick, this wonderful.
Light blue is what we're going to call it.
I know there's a lot of discourse over what color it is.
But it's given us an ad for us to be able to buy now, buy online or find a rese
ller.
And that's because we're still using the trial key that you will have to change
when you access this lab inside of ADEPT.
We go through that in the previous skill, just FYI.
Now, I don't want to for us to be able to access the different types of plugins
.
We first have to create a new scan or modify a current scan.
And inside of here, you will see that all those different scan types
that we mentioned earlier pop back up to us.
And we're just going to go inside of advanced scan.
Now inside of here, you can type in many different things to include the name,
description, folder, targets.
And for this particular target, we're going to be typing in 192.168.
One second, 247.1.
And that'll be our target.
That's the actual host system that's hosting this virtual machine
that we're working with right now.
Now, before we continue to do our scan, we're going to go over to the plugins
tab.
Let me show you real quick that it's right there up at the top, fourth one to
the right.
And inside of here, you see the many different plugin family.
Now, not all of these are related to Microsoft, even though a bulk of them
should be.
But these are broken down based on vendor product or specific other specified
information.
As you can see inside of there, there is a family of product of vulnerabilities
for Cisco within the plugins databases.
Now, Cisco is its own brand and manufacturer of equipment, such as routers and
switches.
But right below that database is that's just a generic turn that can encompass
either SQL, MySQL, anything related to databases, whatsoever.
Maybe even access.
So those are broken down based on type of service that we're wanting to be able
to scan against.
Now, you can include that inside of your actual scan when we configure the
plugins here.
And the reason that may be needed is because the system that we're scanning,
the 247.1,
even though it's the host, we don't necessarily know if there's any data-based
and capabilities on that system or not.
Now, you could go in inside and also see that there are a total, there's a
total column
and that our first column for AIX local security checks is a total of over 11,
000 different sub-entries.
And if I click on that or double click on it, you can see that those plugin IDs
,
as I, how Zumaini goes to the right,
are identified within that family of plugins.
For instance, the first row that we're taking a look at is AIX and plugin ID
155458.
Now, that information checks out based on what it is that we're actually
getting our information
from from the actual site itself, which I'm trying to pull up as we speak.
And I just pulled it up here on my systems browser and we'll pop out and zoom
in.
But remember, the Microsoft vulnerability that we were taking a look at
has a plugin ID of 100464.
So we can actually search for that particular number,
and 1064, and I'm going to copy that real quick.
And as I search for it, you'll notice that nothing comes up on the left side
and everything's left on the right because that's just one of the parts of
working with NSSIS.
So you may be wondering to yourself, was I a little confused and didn't
identify the actual plugin ID itself?
Yes and no. No, because you actually have to add more plugins beyond the actual
default installation
of NSSIS when you first install it and configure it.
A lot of the plugins that you see here, as I delete this line right here and
show you the families
again. There you go, you can do it. Such as FTP, if I double click, these are
ones installed by default.
If you remember, when we were first installing NSSIS, there was a long wait
period.
Now, if I go to my settings button real quick and go to events, you can see
here,
as I scroll down, to one of the first entries we had and zoom in for you, you
can see that it says,
uh, right on that line right there. Downloading NSSIS plugins, we're just
working with the default
here. So anything past the default is something that we're definitely going to
have to be taking a look
at, that original link that I had at the beginning of the skill for, for
extended plugins.
And now we're going to start moving on to the next part, which is installing
those plugins.