What we want to discuss today, is not exploiting machines through pivoting (that we cover in depth in our course), but how pivoting can be used, during the Post-exploitation process, to scan internal networks, not directly accessible to us. Pivoting can be done in Metasploit, it works very well and it’s quite simple to do. Most of the time the attacker uses this technique to infiltrate multiple computers and subnets in order to reach his ultimate goal (dumping a database, accessing isolated information…).

With this technique, an attacker can use a compromised machine as a “pivot” to attack other machines in the same or in other networks that the compromised host can reach. One of the best features that Metasploit offers is the ability of “pivoting”. Tools: Nessus, Metasploit, Nmap, proxychains.Īttention: In our tests proxychains works only on 32 bit Backtrack 5 Start by downloading a file called “Nessus-10.1.1-debian6_ Blog postsNessus and Metasploit: Scan networks in pivoting Nessus and Metasploit: Scan networks in pivoting The example used here is installing Nessus on a Kali Linux system. The tool is available on Tenable’s website for most common Linux distros.

The installation of Nessus is a relatively quick and simple process. It is managed in the cloud and features advanced dashboards and reports.

Tenable.io is an enterprise-level vulnerability management system designed primarily for businesses with a large number of assets to scan and analyze. With a price of more than $2000 per year, it offers an unlimited amount of assessments, live results, advanced 24/7 support, and on-demand training for users. This option is perfect for consultants, professional pen-testers, and security analysts. It allows you to scan up to 16 IP addresses and offers free community support. This free option is primarily meant for cybersecurity students, educators, and people starting their careers in cybersecurity. Tenable offers three different licenses for Nessus users with different vulnerability scanning needs. According to Nessus’s website, the scanner can check for more than 68,000 different Common Vulnerabilities and Exposures (CVEs). The software has been designed to cover a variety of different technologies, such as operating systems and web servers, and find any possible vulnerabilities that affect these specific technologies. Nessus is a vulnerability scanner developed by a cybersecurity company called Tenable that allows you to perform detailed vulnerability scans on your network.

Run nessus on kali