Instructor: Okay, now that 2 2
we installed Nexpose successfully, 3 3
let's see how we can run that tooL, 4 4
and see what that tool is. 5 5
I know we spoke about it a lot 6 6
and we went through the installation process, 7 7
but you still haven't seen what the tool does. 8 8
So the first thing before we can run the tool, 9 9
we need to make sure that the database 10 10
that comes in with Kali Linux is turned off 11 11
because Nexpose uses its own database. 12 12
So if we have both of them running on the same port, 13 13
they'll conflict with each other. 14 14
So the first thing we're going to do, 15 15
we did that in the previous lecture as well 16 16
before we installed Nexpose, but I just wanna make sure that 17 17
you have it in your mind that every time 18 18
before your Nexpose you turn off your database. 19 19
So you do it using the same command 20 20
that we did in the previous lecture. 21 21
So at service post stop, 22 22
and that will make sure that the service has been stopped. 23 23
Now we're going to navigate to the location 24 24
where we installed Nexpose. 25 25
So unless you change the location during 26 26
the installation process, it should be installed in. 27 27
So we're using the CD command to navigate, 28 28
and it should be installed in opt Rapid seven Nexpose. 29 29
And then the the file that runs the server 30 30
is stored in the directory called NSC. 31 31
And the file that you wanna run 32 32
is called nsc dot sh, this file. 33 33
So we run it just the same way we run the installer before. 34 34
As I said, to run an executable 35 35
you always use the dot forward slash 36 36
and then you write the name of the executable. 37 37
So it's nsc dot sh. 38 38
Now, running this for the first time might take some time. 39 39
So just let it do its thing until it runs. 40 40
And once it finishes loading the framework, 41 41
we'll see how we can access it and use it. 42 42
Okay, so the tool has loaded successfully. 43 43
And as you can see that it's telling us that 44 44
we can browse it using the following URL. 45 45
So what we're going to do now is launch our browser 46 46
and just paste the URL that it just gave us. 47 47
Now, it's asking us to log in. 48 48
So log in using the username and password 49 49
that you created when you installed the tool. 50 50
So my username was zaid, and I'll put my password. 51 51
Okay, and we logged in successfully. 52 52
And you can see that the first thing it asks us to do 53 53
is to enter the product key. 54 54
Now as I said, this is a free version. 55 55
And when you download the tool you have to fill out a form. 56 56
So in that form you put your email address 57 57
and then they send the product key to your email. 58 58
So I'm just gonna go to my email 59 59
and get the product key and paste it here. 60 60
Okay, so I'm gonna post it now, paste it. 61 61
And click on activate the key. 62 62
Now as you can see the activation is successful, 63 63
it's gonna refresh now. 64 64
Now this, I actually paused and received the video 65 65
because the activation takes some time as well, 66 66
I just don't want to make the video boring. 67 67
Now, as you can see this is just showing us information 68 68
about the license, so everything is activated 69 69
and we're good to go. 70 70
So I'm gonna go to the Home from here, from the left menu. 71 71
So this is the homepage of the tool. 72 72
And as you can see now everything is empty. 73 73
So before I start talking about what everything means, 74 74
let's go ahead and add the target and then we'll do a test 75 75
and we'll see, because this stuff 76 76
will be filled after we do a test. 77 77
So the first thing I'm gonna do is go and create 78 78
and go on a site to add a target. 79 79
And I'm gonna call this target Metasploitable. 80 80
And I'm going to go to the Assets. 81 81
And we're gonna add the target. 82 82
So the target can be arranged the same way we added it 83 83
when we were doing the network penetration things 84 84
with Zenmap, so you can add a range 85 85
or you can add a specific IP. 86 86
So in this we're actually targeting 87 87
the Metasploitable machine. 88 88
So we're gonna add our target, 89 89
which is ten twenty fourteen 204, confirm this here. 90 90
This is our Metasploitable machine ten twenty fourteen 204. 91 91
And we're gonna add this to a group 92 92
and we call that Metasloitable as well 93 93
or we call this test. 94 94
So this is our group name. 95 95
Now and here in the authentication part, 96 96
if the target uses some sort of authentication, 97 97
so nobody can access the target unless they need 98 98
to authenticate with some sort of a service for example, 99 99
if it's an FTP service or a web HTTP authentication, 100 100
a TELNET or an SQL Server. 101 101
So you can pick it from here, 102 102
put the domain username, password, confirm your password. 103 103
And that way the framework will be able to authenticate 104 104
with that service and test the security of your server. 105 105
Now our server doesn't use any type of authentication, 106 106
so we don't need this. 107 107
Also if you're targeting a web application, 108 108
and the web application uses, has a login page for example, 109 109
for users, for example Facebook. 110 110
Let's say you're targeting Facebook, 111 111
then you won't have access to most of Facebook's features 112 112
unless you log in using a certain username and a password. 113 113
So again, using this feature here you can login 114 114
and then test the security of your target. 115 115
And the Template is where you select the Scan type. 116 116
So it's very similar to this Scan type with Zenmap, 117 117
we seen in Zenmap we had, a Quick Scan, 118 118
Quick Scan Plus and Intense Scan, this is the same. 119 119
So each one of these profiles is different, 120 120
it scans different things. 121 121
For example, we have the full audit here 122 122
which takes a lot of time, 123 123
but pretty much checks for everything. 124 124
Then you have a full audit enhanced logging 125 125
without a Web Spider. 126 126
So a Web Spider is a tool or a script 127 127
that finds all the files and directories in your target. 128 128
And the default one is a full audit without Web Spider. 129 129
So that's the one we're gonna be doing. 130 130
And you also have network specific profiles, 131 131
you have web audits as well. 132 132
So I really encourage you to try all of them or most of them 133 133
and get yourself familiar with them. 134 134
Now we're only gonna try this one because using them 135 135
is the same, which we'll be scanning 136 136
for ICMP TCP and UDP ports. 137 137
So I'm leaving that the same, I'm gonna leave 138 138
the Engine the same as well, which means 139 139
it's going to use our local engine which we installed 140 140
instead of using the one that is provided by Rapid seven. 141 141
And the alerts, you can set up custom alerts, 142 142
so that whenever an ability is found 143 143
you get a notification. 144 144
And the schedule is a really, really cool feature. 145 145
Now say you're working for a company or for an enterprise 146 146
that keeps pushing code, new code every day. 147 147
Or, for example, maybe your code you do a test today 148 148
and everything you're working on is good. 149 149
Your web servers, your programs, your applications, 150 150
everything is up to date 151 151
and there is no vulnerabilities in them. 152 152
Let's say tomorrow you push a new vulnerable code 153 153
or maybe tomorrow someone discovers a new vulnerability 154 154
with a program that You're using on your web server, 155 155
so you're not secure anymore. 156 156
So this feature allows you to schedule this test 157 157
so that it runs every week or every hour or every month 158 158
dependent on how critical it is. 159 159
So all you have to do is just go into create a schedule, 160 160
and create the schedule. 161 161
So you can put a start date and an end date. 162 162
And you set up the frequency from here for every day, 163 163
every Thursday, every 26th 164 164
or depending on what you want, really. 165 165
You create a schedule, and then every interval 166 166
that you specify, the scan will run. 167 167
And even you can get it to produce a report for you, 168 168
so you can go over the report and see what's changed 169 169
or what has been discovered. 170 170
So everything's good now. 171 171
The most important part today or what we did here 172 172
is you put your target here. 173 173
And the next thing is you select the template. 174 174
So we have both of them selected 175 175
and we're gonna do save and scan, 176 176
which will save this configuration and start a scan for us. 177 177
Now as you can see our Asset Discovery is in progress. 178 178
I'm gonna pause the video and after that 179 179
we will talk about the results that we got.