### What benefit is gained when Nessus is able to log in to the target server being scanned?

Login to the scanned server with Nessus, i.e. credentialed scanning, offers several benefits and improves the efficiency of security inspections because:

**Detailed results:** By logging into the scanned server, Nessus obtains a more accurate picture of the system's status. It can gather information that is not available without proper login credentials, such as user information, software versions, and configuration data.

**Comprehensive vulnerability assessment:** Credentialed scanning enables a more in-depth vulnerability assessment. It is capable of detecting vulnerabilities within the system that are not visible through network-level scanning alone.

**Less false positives:** With login credentials, Nessus can directly check the system's status from the inside. This reduces the number of false positive results, which are situations where the scan reports a vulnerability that does not actually exist.

**Cybersecurity configuration assessment:** Credentialed scanning can be used to examine and evaluate security settings directly on the system. It helps to ensure that appropriate security settings are in place and potential risks are minimized.

**Software Inventory:** Credentialed scanning helps collect information about installed software and their versions. This is important in ensuring that all programs are up-to-date and security risks are minimized**.**

**Continuity monitoring:** Credentialed scanning can be used to monitor the status of the system over time. This helps identify and address any security issues as the system evolves over time.

### 

### Practical Exercise

In this module, we will see how to get Nessus to log in to the server being scanned. Start the exercise below and repeat the steps afterwards.

@exercise f0ce3d976f0d

Start by creating a new *Advanced Scan -* scan and set the target address according to the previous example, and specify basic information for the scan. Then open the *Credentials* view and select *SSH* from the left-hand side list.

### SSH login configuration

*Authentication method* means the method of logging in, whether Nessus uses SSH certificate, password, or public key for authentication. Password-based login is selected here, even though it may not be the best option in the real world. The username is *msfadmin* and the password is *msfadmin.*

*Elevate privileges* *with* means the way Nessus elevates its privileges after logging into the server. Let's leave this empty for now.

![](sanity:image-8c8b8a5ad1dec2596e2c0c6a3ca50edf3d54eabf-936x766-png)

You can now start the scan and wait for it to complete. Finally, make sure that the login was successful by verifying the following observation.

![](sanity:image-245ae1a4b1ee5fc234eabcb0cb0ffd2c96549793-940x666-png)

Finally, answer the question below:

@exercise 8b2bb06254ed

### 

### Other login methods

There are several ways to configure login for different systems in Nessus.

**SNMPv3 (Simple Network Management Protocol):**

- SNMPv3 is a protocol that allows for data collection from network devices, such as routers and switches. It provides security features such as encryption and authentication, making it a safer option than earlier versions of SNMP.
- In order to configure SNMPv3 authentication in Nessus, you need to specify the SNMPv3 community name, username, password, and encryption key (if using an encrypted connection). These details enable secure and reliable data collection from SNMPv3-enabled devices in Nessus.

**Windows login:**

- Windows login in Nessus is particularly important when you want to view information that requires the user to login to the Windows system.
- To configure Windows login, you need to provide Nessus with appropriate login information, such as username and password. Additionally, you need to select the correct login method (e.g. SMB or WinRM) and potentially specify other settings, such as workgroup or domain name.
- WinRM (Windows Remote Management) is a protocol that allows remote login to Windows systems. If you use WinRM, it must be configured and available on the Windows devices being monitored.


Note! - Sorry, Nessus is still in beta and it takes about 5 minutes to start up. _BUT_ you don't have to turn off the lab in between when you move on to the next task.

Nessus exercise

SSH login configuration

Nessus is a widely used security assessment tool designed to identify vulnerabilities and weaknesses in computer systems, networks and applications.

Nessus is a widely used cybersecurity assessment tool designed to identify vulnerabilities and weaknesses in computer systems, networks, and applications.

SSH login configuration

Learn to hack — start here