What we want to discuss today, is not exploiting machines through pivoting (that we cover in depth in our course), but how pivoting can be used, during the Post-exploitation process, to scan internal networks, not directly accessible to us. Pivoting can be done in Metasploit, it works very well and it’s quite simple to do. Most of the time the attacker uses this technique to infiltrate multiple computers and subnets in order to reach his ultimate goal (dumping a database, accessing isolated information…). With this technique, an attacker can use a compromised machine as a “pivot” to attack other machines in the same or in other networks that the compromised host can reach.

One of the best features that Metasploit offers is the ability of “pivoting”.

Lets see how to Install Nessus on Backtrack 5 with step by step tutorial.Tools: Nessus, Metasploit, Nmap, proxychains.Īttention: In our tests proxychains works only on 32 bit Backtrack 5 HomeFeed users will need to re-register Nessus when moving between physical hosts.

ProfessionalFeed users are currently limited to one reset every 30 days. By logging into the Tenable Customer Support Portal and going to “Activation Codes,” you can reset the activation code-to-host pairing. If you are using a Nessus ProfessionalFeed, you are allowed to reset your activation by clearing the current connection between a host and an activation code. If you do decide to move the virtual machine to a new system, or jump around to different systems using a bootable USB thumb drive or DVD, you will have to re-activate Nessus. The Nessus activation ties itself to the physical system on which it is installed. If you activate Nessus on a bootable USB thumb drive, DVD, or a virtual machine and move it to a new host system, the Nessus activation code will no longer be valid. Before you activate Nessus on your BackTrack 5 installation, be certain you have installed Nessus on Backtrack, either to the hard drive on the computer you plan to use or inside of a virtual machine that you plan to keep on the same host system. Nessus 4.4.1 now comes pre-installed on BackTrack 5 and requires the user to activate the installation.

How to use nessus backtrack 5