All right, good afternoon. We are going to install and use
NSIS
today.
Now, start off with, I just punched into Google Nus
install Linux because we're on a LIS machine at
that little link and you can see that it provides me a download button right here.
I'm gonna click that download button. Since
take me to a new website,
it's going to do
NSIS 10.7 0.3. That is the current version available,
but we're not in
buu
system. We're on a Debian.
So I'm gonna scroll up until I find Debian. Here it is.
We're gonna do the AMD 64 right there
and we're gonna hit that little download button.
Now, I've already downloaded my version just to speed this video up.
The next thing we have to do is we go back after we're done downloading
and if you click this little plus button right here,
it gives you the command right here.
So that DDPKG, I'm gonna grab that,
I'm going to copy it.
Now, you'll notice I didn't grab the NSIS version.
There's a reason why because you'll notice that it has version number right there.
And I like hitting that tab button.
So I'm gonna open up my terminal and blow this up for you.
First thing I need to do is get into my downloads folder.
So I'm going to do a CD downloads
like that,
do LS and we can see that we are actually using
NSIS
right there.
So I'm going to input that
Ay clipboard
and instead of you can see here that I tried to do it earlier. That's all right.
We're doing
NSIS.
And then if I just hit tab, you can see that it autofills
and now we're ready to go. It says you can start Nessa skinner by typing Ben Start
service.
I'm just gonna grab all that
copy that selection and then we'll just use it in here
and we can start it
once we've started it, we then go to this website right here.
I'm just going to do Open Lake.
We're gonna do advanced
and I'm gonna go and accept the risk.
And here we are, we're at the NSA start page right now. We've installed NUS
onto our system.
Now, we need to actually scan something with it.
So the first part of our process is to make sure we
actually have something to scan and you can see here that I've got
Kops two running in the background.
Uh Kops
two is off of vol.
You can remember to find that or you can download that off of the specific systems.
All right. So I'm going to open up my terminal.
The very first thing I need to do right off
the bat before I do anything else is find that the
optics two system
and in order to do that, I'm just gonna do an, if config
you can see, I'm on 10.0 0.2 0.9. And then I'm just gonna do an in
app suite. I'm just gonna do a switch SN
10.0 0.2 0.0 with a slash 24 network.
And it should identify
where that
uh Kias
two is actually pushed out at. Now, I'm on 2.9 which means our
Kias
is most likely on 2.5.
Then system
CTL
and then start
start
NSIS,
the just like that
enter
type in that password for it.
And I should have NASA starting right up
just some CTL
and then status
and of course,
NSIS
like that
and we can see here that
our system is running.
It is
just like we want, ok?
If we had it disabled, let's say that something was disabled.
For whatever reason we could do a system
uh
is enabled. So I could do that. Now I can do
and then system CTL and then enable and then
NSIS
like that
and we've enabled it.
And now if we did a status again,
we can see here that it has in fact been enable.
Ok. So in order to get on an SS, it's actually a web UI a web gooey interface.
I'm going to open up Microsoft or I shouldn't say Microsoft, I am opening up Firefox
just like that. And we're going to provide that onto the localhost.
So it's just going to be,
if I open up the page, it's going to be on localhost right here and I can do it
right here at
Neos.
Here we go.
And you can see that I am there. Now,
when you do yours, yours may not be Kindrick, right?
Depending on how you set it up. It could be something else, ok?
So it could be a localhost.
It could be however you set yours up in my case, mine is under Kindrick 0.8834.
And I'm just gonna go ahead and sign in.
Ok?
All right. Now I've already done some scans on the system,
but I'm gonna walk you through the process. Ok?
The very first thing is we want to let it update everything that needs to be updated,
ok?
And you can see that it started and then it was successful,
just let it finish any updates the first time
that you run
nus
uh expect to just let it sit there for about about 2 to 3 hours, right?
Go get some coffee, let it finish updating, it needs to go through and actually
do some software updates, right? And we can see software updates right here.
You can update all the components or whatnot, ok?
But under the events is where we actually see what's going on. All right,
you can see the last time I logged into the system
was actually May 29th and it updated based off of that right
now, once you've let it update,
you can go to scans.
Ok. From scans,
you can see past scans,
but you can also do a new scan and you
can see that I've already performed that scan just because,
uh and if I wanted to relaunch it, I could relaunch a new scan.
I'm gonna do a new scan,
but I'm going to provide it and name it something else
because I wanna be able to look at these results.
So we're not waiting a couple of hours for that to take place.
The scans that I can do are all right here. OK?
I could do a host discovery scan just to figure out where things were.
If I didn't want to use in map, I can utilize that.
I can do a basic network scan, a advanced scan.
I mean, there's all kinds of different scans that you can utilize. Some of them.
You have to upgrade to, you have to pay money to go through with the
NSIS essentials, which is what we started.
Uh We're good to go, right.
You can see here that a new version of
NSIS is available and if I wanted to, I could apply that.
Now, I'm not going to for taste purposes. It doesn't make sense to.
Uh but you can see all the different scans associated that I could,
I could go through.
Uh I'm going to do a basic or I should say I'm going to do an advanced scan.
If I start the advanced scan, I just click on it.
I can name it whatever I want. I'm going to name this one test. Number two,
just like that. I can provide a description
the objects to
and then basic scan
it like that.
And you can see that it's gonna go to my scans
folder and then I need to provide it a target.
Now, if you remember correctly, we were on 10.0 0.2 0.5
just like so
and then I just save it
once I've saved it.
You can see the test number two is on demand
schedule and has not been scanned and to start it,
I just hit that launch button just like that
and it's gonna start scanning through the process
while it's scanning.
Let's take a look at the scan that we
already performed because there shouldn't have been much change
if I click on that
and you'll have the similar window. Once your system is done scanning,
you can see that I've got the IP address
the different vulnerabilities.
You can see that it identified two critical vulnerabilities, 21 high,
21 medium seven low and 63
which are informational things that we should be aware of
that. We may want to take care of
if I click on the vulnerabilities tab,
it provides me in descending order of CBS S
score highest to lowest exactly what I'm looking for.
Ok.
And you can see that if I click on that, it'll go through and actually run it out.
All right, from there, I can click on any of these that I want more information on.
For instance,
I want more information on Unix operating
system on supported version detected because key
optics two is running such an older operating system.
The system is detecting it and say, hey,
this operating system isn't supported anymore
and has some very major holes in it.
We should consider updating this operating system.
Uh We can also see that critical 9.8
SSL version two and three protocol detection. If I click on that,
we can see a description, we can see the remote server accepts connections,
encrypted using SSL 2.0 or 3.0.
And these versions are affected by several cryptographic flaws.
Uh We can see the insecurities.
If we scroll down, we can see the output associated with it.
If I scroll back up, I can see remediations
that the system recommends that I do.
And it says, hey, action PHP version or OpenSSL and we could follow that along
and see what it has to do. We can also see a history of when the scans were taking place.
So if something changed, if I was doing a scan,
say once a week or once a month or whatnot.
I could see what was going on and I guess
all the past history of different scans associated with it.
Let's go back to this vulnerabilities window right here
and you can see that I can look at some more items, right?
I can see timestamp and again, it gives us the same basic flow structure
across the board of what we want to do.
It could even provide us the different remediations
associated with it.
So we can search different actions.
We can again, look at the history, we can again look at the host associated with it
and that this just gives us a, a good idea of what's going on across the board, right?
If I did not want to see
uh this alarm, whatever reason,
let's say that this was a legacy system that we knew we had problems with.
And I didn't want to see it in the future. I could hit that snooze button
and I could snooze this for one month and any future scans that I reran
will not populate with that, right?
I can also modify it if I didn't want a critical, let's say that I said, you know what,
this isn't critical,
it's actually
uh information or I don't want to see this result.
I could do that.
A lot of times we're not gonna do the hide uh results unless we're running a system.
And I ran into this issue a while ago where we ran a scan
against a Windows machine.
Uh And it was populating with a bunch of Linux vulnerabilities.
In that case, we hid those vulnerabilities because we really didn't need
to see Linux vulnerabilities on a Windows machine.
They were relevant, they were positives.
Uh And so we were able to go through that process.
All right,
that's NAIS
in a, a very short time frame.
It's a great tool. It really is. And if you have the paid version, it's even better.
All right,
nsas really does put a lot of effort and time into their software
and I can't say enough nice things about it. It does a great job. All right,
with that said, that's it for this video. We will see you next time. Thanks everyone.