Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I need a good vulnerability auditing tool for Ubuntu so I decided to try nmap I also recalled that there was a product that can do this kind of work called Nessus it is no longer available in the repository and the packages for Ubuntu at its site http://nessus.org/nessus/ are old, I suppose that the latest one may work on maverick though, does anyone have any experience using nessus? How does it compare to nmap?

share|improve this question

5 Answers 5

up vote 7 down vote accepted

As far as I'm aware, Nessus is no longer free. You should take a look at OpenVAS, which is a Nessus alternative (and has even better coverage), instead.

OpenVAS (Nessus alternative) and Nmap are very much different. You can use OpenVas to find vulnerabilities without knowing how to look for them as OpenVAS tries out numerous attacks collected from various sources, whereas you do need to know what you are doing, where to look for, with Nmap.

share|improve this answer

Nmap is faster, Nessus is more complete. The repositories of BackTrack have the lastest nessus and Nmap.

share|improve this answer

nmap is not a vulnerability scanner, it's network services scanner, it only detects available network services, it does not scan them for vulnerabilities. Nikto (from package nikto) is a good web server vulnerabilities scanner.

share|improve this answer
    
Thanks for your suggestion, yes you are correct about nmap not being a VS, it can be used in a limited way of such with scripts though. –  Sabacon Nov 10 '10 at 13:54

You can still get Nessus for Linux. You need to download it direct from http://nessus.org/nessus/

Please note that there are differences between the pay for version and the free version. See here -> http://nessus.org/documentation/index.php?doc=faq#anchor66

Thanks Chris

share|improve this answer
    
Also as already specified. NMAP is not a vulnerability scanner. It is a network scanner. –  Chris Woollard Nov 10 '10 at 11:27
    
Technically, you are correct it is not a vulnerability scanner by itself, just a part of your security toolset, If you use scripts with it such as Nmap NSE Vulscan here: computec.ch/mruef/?s=software&l=e some VS can be done. –  Sabacon Nov 10 '10 at 13:46

Nessus is available in a Free version (non-commercial use only).

OpenVAS the fork of Nessus is Open Source and continues to be developed (http://www.openvas.org).

NexPose is a vulnerability scanner from Rapid7, community version can scan up to 32 IP's for Free.

Nmap with NSE can perform vulnerability checks (as mentioned above).

A comparison was done recently between the different scanners - http://hackertarget.com/nessus-openvas-nexpose-vs-metasploitable/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.