On today's show I'll show you Nessus, a free, open-source vulnerability scanner that runs on Linux. Nessus scans a target IP address for holes, back doors, and various exploits.

When Nessus finishes a scan, it creates a formatted HTML report on the target IP. The report lists the target's weaknesses for you to hack or repair.

Not for newbies

Nessus is my favorite vulnerability scanner, but Linux newbies may find Nessus difficult to configure and get running. To make things easier, you need Knoppix, a free distribution of Linux that comes with Nessus preinstalled. All you have to do is burn the Knoppix image to a CD and then boot from the CD.

Need your help
The demand for Knoppix STD has been tremendous. The Knoppix STD site needs your help. If you can host a mirror, send an email to the Knoppix STD site administrator.

Steps to run Nessus

1. Download Knoppix STD (600MB download)
   You want the Security Tools Distribution of Knoppix. Download the ISO file and save it to your Desktop. If you can't get the download from the link above, try these mirror sites.
   • ftp://ftp.mihosan.com/knoppix-std-0.1b.iso
   • ftp://ftp.wiresec.net/knoppix/knoppix-std-0.1b.iso
   • ftp://drevil.seas.wustl.edu/knoppix-std-0.1b.iso
   • ftp://ftp.epix.net/pub/knoppix/knoppix-std-0.1b.iso
   
   
2. Burn Knoppix
   Fire up Nero and choose Burn Image from the File menu. Select the ISO image and click Burn. (Make sure the "finalize CD" box is checked.)
   
3. Boot from the Knoppix CD
   Put the CD in and watch it boot. If it doesn't boot, make sure your BIOS is configured to boot from the CD. At the Linux prompt, hit Enter on your keyboard.
   
4. Start Nessus
   Remember, Nessus is already installed in Knoppix. Run Nessus from the launch menu and enter the following:
   
   • Username: knoppix
   • Password: knoppix
   
   
5. Start scanning
   

Got a tip?
Send me an email or post a message on my forums.


Hacking