Scanning Vulnerabilities with Nesssus

Set up windows vm:

Download oracle virtual box

https://www.virtualbox.org/wiki/Downloads

Download microsoft windows iso file

https://www.microsoft.com/en-us/software-download/windows10ISO

start up windows VM in Virtual Box

Windows VM settings:

4096 ram

50gb ssd

4 cpu

network settings: adapter 1, Bridged network

Take down firewalls in windows vm

Check if you can ping VM through host machine

Download nessus

https://www.tenable.com/products/nessus/nessus-essentials

Create nessus account

check email for nessus registration key

create new scan in nessus

basic network scan

run the scan pre scan pro scan pro scan, vulnerabilties tab under windows single host scan

In Windows VM: Remote Registry>Stat Up Type: Automatic

Advance Sharing Settings>Turn on file and printer sharing

User Account Control>Never Notify

Registry Edit>Computer>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System Create new DWORD file named LocalAccountTokenFilterPolicy and modify binary value to 1

Configure creditentials

Restart scan

Scan after making VM more vulnerable