[Azaleh]

What is Nexpose?

Nexpose is a vulnerability managment framework, it allows us to discover, assess and act on discovered vulnerabilities,
it also tells us a lot of info about the discovered vulnerabilities, weather they are exploitable and helps us write a report at the end of the assessment.

-------------------------------

1. Download Nexpose from the Rapid7 Website.

You want to download the Community Edition as its free and does not expire. You will have to sign up to receive your key.

2. First we need to change the permissions so we can run the file.

Run this command before we start (this command will need to be ran everytime you want to use Nexpose)

service postgresql stop

Change Permissions

chmod +x filehere.bin

3. You need to edit 2 files (make a backup of the files as once the installation has completed you will need to return the files to there original state.

First file to edit is

/etc/lsb-release

Replace everything inside with this:

DISTRIB_ID=Kali
DISTRIB_RELEASE=2.0
DISTRIB_CODENAME=sana
DISTRIB_DESCRIPTION="Kali GNU/Linux 2.0"

Second file to edit is

/usr/lib/os-release

Replace everything inside with this:

PRETTY_NAME="Kali GNU/Linux 2.0 (sana)"
NAME="Kali GNU/Linux"
ID=kali
VERSION="2.0 (sana)"
VERSION_ID="2.0"
ID_LIKE=debian
ANSI_COLOR="1;31"
HOME_URL="kali.org/"
SUPPORT_URL="forums.kali.org/"
BUG_REPORT_URL="bugs.kali.org/"

4. Install Nexpose

Run File
Goto the file directory then run the file by using the command:

./filehere.bin

Leave Start Nexpose after installation unticked.

5. Go back and replace the files with the original ones you backed up.

Finally you can now run Nexpose, to do so follow these commands.

service postgresql stop

cd /opt/rapid7/nexpose/

./nsc.sh

The first time it may take a while to load up, and sometimes you may receive an error. If you receive an error just exit the command line and run the nsc.sh command again.

I thought I'd write it up quickly as I did a search for Nexpose and didn't see anyone with a tutorial to install it on Kali 2.

[Ryuce]

nexpose is nice. It will help the beginners for sure.

thanks for this tutorial. I would love to get this game going on !

[Soaca]

Been looking for this maan, thanks a bunch.

[Ѕeptic]

Thanks a lot for this tutorial OP, you helped me out!

[Anubis]

Thanks for this. I am definitely gonna check this out.

[skyhax]

Thanks man! Trying it out as I write this!

[0zm0]

Thanks man i appreciate it

[easy_win]

Should note that OpenVAS is another one for people to check out. There some scanners that restrict which vulnerabilities they will detect while others will give you full coverage but limit IP space. Using both is suggested.

[king alhackers]

There some scanners that restrict which vulnerabilities they will detect while others will give you full coverage but limit IP space. Using both is suggested.