用nmap检查
nmap --script "ssh2*" kafka-2
nmap --script ssh2-enum-algos -sV -p 22 kafka-2
参考资料:
http://www.kkx.net/wz/468.html
https://blog.csdn.net/weixin_44280963/article/details/105527976
https://mrxn.net/hacktools/659.html
nessus安装指引: https://blog.csdn.net/lirunling/article/details/79035089
下载安装包 https://www.tenable.com/products/nessus/select-your-operating-system
注册获取激活码:https://www.tenable.com/products/nessus-home
离线激活:
challenge code: b8067aa60cb13f774984cf48af7c9ec5eda8ec65
邮件收到的激活码: 2FE4-7E9C-291E-4257-60D0
到 https://plugins.nessus.org/v2/offline.php 生成license key(需要翻墙)
创建用户名密码:admin/xxxxxxxx
激活码2:DF3D-2D2E-53D6-787F-7C69
C:\Program Files\Tenable\Nessus>nessuscli.exe update all-2.0.tar.gz
[info] Copying templates version 202010191623 to C:\ProgramData\Tenable\Nessus
essus\templates\tmp
[info] Finished copying templates.
[info] Moved new templates with version 202010191623 from plugins dir.
- Update successful. The changes will be automatically processed by Nessus.
1.更新插件包 nessuscli.exe update all-2.0.tar.gz
2.离线激活 nessuscli.exe fetch --register-offline nessus.license
3.编辑plugin_feed_info.inc 放到 C:\Program Files\Tenable\Nessus 和C:\Program Files\Tenable\Nessus\plugins plugin_feed_info.inc里面的PLUGIN_SET是“更新插件包”步骤输出的。文件内容如下:
PLUGIN_SET = "202010191623";
PLUGIN_FEED = "ProfessionalFeed (Direct)";
PLUGIN_FEED_TRANSPORT = "Tenable Network Security Lightning";
4.重启服务 net stop "Tenable Nessus" && net start "Tenable Nessus
5.重新访问https://localhost:8834 等待插件编译完成