【漏洞扫描器】Docker安装tenableofficial/nessus扫描工具

一、Nessus简介

Nessus 是系统漏洞扫描与分析软件，系统漏洞扫描与分析软件。
利用业界最值得信赖的漏洞评估解决方案来评估现代攻击面。扩展到传统IT资产之外——确保云基础设施的安全，并了解您的互联网连接攻击面。

官网地址：https://www.tenable.com/products/nessus
下载地址：https://www.tenable.com/downloads/nessus?loginAttempted=true

二、docker启动

2.1、拉取镜像

docker pull tenableofficial/nessus

2.2、启动容器

docker run -itd --name my-nessus --restart=always -p 8834:8834 tenableofficial/nessus

[wangdy@MacBook-Pro cvec % docker run -itd --name my-nessus --restart=always -p 8834:8834 tenableofficial/nessus
WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
f57fc9a07bd2a8ff207f8185d977a0c8c2e4ca60964873850afbcd73a98e69b9

三、获取激活码

点击这里注册获取激活码: https://zh-cn.tenable.com/products/nessus/nessus-essentials
按需输入名字、姓、和自己可以接收激活码的邮箱，点击开始。邮箱会收到邮件，里面有激活码。

四、离线更新插件

4.1、进入容器

docker exec -it 容器ID bash

4.2、切换到nessus安装目录下的sbin文件夹

cd /opt/nessus/sbin

4.3、使用如下命令生成challenge code

./nessuscli fetch --challenge

4.1-4.3全过程如下：

[wangdy@MacBook-Pro front % docker exec -it f57fc9a07bd2 bash
[root@f57fc9a07bd2 nessus]# cd /opt/nessus/sbin
[root@f57fc9a07bd2 sbin]# ls
nessus-service  nessuscli  nessusd
[root@f57fc9a07bd2 sbin]# ./nessuscli fetch --challenge

Challenge code: 41f9607d08d7f9fd43f00e5a13195489d1eda1e2

You can copy the challenge code above and paste it alongside your
Activation Code at:
https://plugins.nessus.org/v2/offline.php
[root@f57fc9a07bd2 sbin]# 

4.4、使用challenge码和激活码获取插件下载地址

根据4.3的提示，去以下链接获取插件：https://plugins.nessus.org/v2/offline.php

第一个输入框输入：Challenge code
第二个输入框输入：你第三步里邮箱获取的激活码
点击"Submit",在跳转的页面里做如下2个操作：

1. 点击顶部的下载链接，下载all-2.0.tar.gz文件
   

2. 点击底部的Download nessus.license下载license文件
   
   

4.5、将上述下载的2个文件复制到docker容器内

将下载的all-2.0.tar.gz文件和许可协议文件nessus.license文件复制到Nessus所在容器的的/opt/nessus/sbin目录下如下所示：

wangdy@bogon Downloads % docker cp nessus.license f57fc9a07bd2:/opt/nessus/sbin
                                             Successfully copied 3.07kB to f57fc9a07bd2:/opt/nessus/sbin
wangdy@bogon Downloads % docker cp all-2.0.tar.gz f57fc9a07bd2:/opt/nessus/sbin 
                            Successfully copied 405MB to f57fc9a07bd2:/opt/nessus/sbin
wangdy@bogon Downloads % 

进入nessus容器内/opt/nessus/sbin下查看拷贝结果：OK

[root@f57fc9a07bd2 sbin]# ls
all-2.0.tar.gz  nessus-service  nessus.license  nessuscli  nessusd
[root@f57fc9a07bd2 sbin]# 

4.6、更新插件

接着，在nessus容器内的/opt/nessus/sbin下执行如下命令更新插件:

./nessuscli fetch --register-offline nessus.license 
./nessuscli update all-2.0.tar.gz

执行全过程如下：最终是successful

[root@f57fc9a07bd2 sbin]# ./nessuscli fetch --register-offline nessus.license 
Your Activation Code has been registered properly - thank you.
[root@f57fc9a07bd2 sbin]# ./nessuscli update all-2.0.tar.gz

[info] Copying templates version 202307181818 to /opt/nessus/var/nessus/templates/tmp
[info] Finished copying templates.
[info] Moved new templates with version 202307181818 from plugins dir.
[info] Moved new pendo client with version 21691 from plugins dir.
 * Update successful.  The changes will be automatically processed by Nessus.
[root@f57fc9a07bd2 sbin]# 

4.7、添加用户名

nessus是用户名，可以根据自己意愿修改。后续创建用户账户的时候，保持一致即可。

[root@f57fc9a07bd2 sbin]# ./nessuscli adduser nessus
Login password: 
Login password (again): 
Do you want this user to be a Nessus 'system administrator' user (can upload plugins, etc.)? (y/n) [n]: y
User rules
----------
nessusd has a rules system which allows you to restrict the hosts
that nessus has the right to test. For instance, you may want
him to be able to scan his own host only.

Please see the Nessus Command Line Reference for the rules syntax

Enter the rules for this user, and enter a BLANK LINE once you are done : 
(the user can have an empty rules set)



Login    : nessus
Password : ***********
This user will have 'system administrator' privileges within the Nessus server
Is that ok? (y/n) [n]: y
User added

五、重启查看安装结果

5.1、重启nessus容器

docker restart 容器id

wangdy@bogon codes % docker restart f57fc9a07bd2
f57fc9a07bd2

5.2、浏览器访问配置

https://localhost:8834/#/
按下图顺序依次操作：


输入邮箱里获取的激活码:


创建用户账户：输入用户名密码，创建。如果在4.7执行过adduser，此处会跳过进入下一步。

初始化：这里根据环境不同需要一点时间

初始化完成后，会进入登录页，输入创建的用户名，密码登录即可。

登录成功后：（如果没有如图信息，不要急，等会儿，然后刷新下）

END