Installing Nessus on a raspberry pi 4
A step by step guide to install Nessus on a raspberry pi 4

Yo, what's up cyber folks! My name name's Santosh, and I'm a cyber enthusiast with a serious passion to learn hacking and red team shenanigans.
Search for a command to run...
A step by step guide to install Nessus on a raspberry pi 4

Yo, what's up cyber folks! My name name's Santosh, and I'm a cyber enthusiast with a serious passion to learn hacking and red team shenanigans.
No comments yet. Be the first to comment.
The AndroidManifest.xml file is the heart of any Android application, acting as a blueprint that defines the structure, components, and permissions of the app. From a penetration testing perspective, understanding and analyzing the AndroidManifest.xm...

Understanding the Structure of an Android Project When starting with Android app development, it’s essential to understand the structure of an Android project. Here's a breakdown of the typical directory and file structure: project/ ├── app/ │ ├── ...

Before diving deep into the world of exploiting Android app vulnerabilities, it is essential to understand the inbuilt security features that Android provides. These features form the backbone of the operating system's defenses and are key to underst...

Unveiling Android's Architecture: Layers, Security Challenges, and Potential Vulnerabilities

What is SOP or Same Origin Policy? According to MDN Web docs, The same-origin policy is a critical security mechanism that restricts how a document or script loaded by one origin can interact with a resource from another origin. It helps isolate pote...

Usage: Someone may ask, till now people were installing Nessus on a virtual machine or a server and it works fine. Then why on a raspberry-pi. The simple answer is that we can carry this cheap kit anywhere and can run in a network and nobody can notice it physically. For sure a network administrator and SOC team have all the privileges to find if a raspberry pi is running in the network.
Hence tenable has released a Nessus package for ARM CPU which is specially built for Raspberry pi.
TLDR; Raspberry pi with 32-bit raspberry pi OS installed. You can refer my blog for step by step guide.
The only pre-requisite for this installation is a raspberry pi kit with Raspberry pi 32-bit OS installed. While writing this blog tenable has released a 32-bit Nessus package only. So in case if you are trying to install it on a 64-bit package you may face some problems as I have gone through the same. But it should not be the case. As far as I know, all the 32-bit software should support 64 bit CPU. If you know why that is happening please let me know.
Without any further delay, let’s see what steps someone should follow to do it. The best place to get started is the tenable documentation itself.

From here we can download the required Nessus package after agreeing to the terms and conditions.

Once downloaded we can use the below commands to install the Nessus.
cd Downloads/
sudo dpkg -i Nessus-10.3.0-raspberrypios-armhf.deb
sudo /bin/systemctl start nessusd.service

Now open the browser on raspberry pi and go to https://raspberrypi:8834. Congratulations Nessus installation is successful if you see a certificate error on the browser. Now select the Nessus essentials. If you have a license for others you can go with that.

In the next screen fill the details and click on “Email”

You will receive an activation code on your mail address and fill that in on the next page.

You will be asked to set up the username and password for signing up. Once that is done you can sign in to the Nessus console.

It will take a lot of time to download and compile the plugins, which are the core things used during vulnerability scanning.

After logging in we can create a scan as per our requirement. Creating a scan is very easy on Tenable.
Click on New scan

Select the scan template. Here we will select the “Basic Network scan”

Now fill in the details in the form → Name, Description, Targets. Then click on the small drop-down button near to save button and click Launch,

Now we can see a scan has been started.

After some time the scan will be completed and we can see the results.


Next, we can export the report or we can analyze the vulnerabilities.
That’s all for this blog. If you want to get a brief idea about the Vulnerability assessment, then you can check my Vulnerability assessment blog. Thanks for reading and please reach out to me for any feedback.