Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have scanned my website using Nessus.But I need to scan it as logged in user since most of the urls are accessible only if we are logged in.How can I set website login credentials in Nessus?

share|improve this question
Login mechanisms differs from site to site, can't you just disable the login mechanism or make an auto-login from a certain IP? Otherwise try your favorite search engine – HamZa Apr 30 '14 at 10:08
I have searched in google before asking here..didn't get solution..'Scaning by login mechanism disabled' seems good idea..Will check that... – Harikrishnan Apr 30 '14 at 17:00
up vote 1 down vote accepted

Nessus 5 made a change: It's in the Preferences section:

  • Login configurations
  • HTTP login page

There you can set your HTTP credentials/settings.

This is a basic check in the documentation. Why go Google, when you can RTFM....

share|improve this answer

Nessus has the information posted on their page with a full walk through.

share|improve this answer
No. It's for log in to the remote host (Remote login) and scan. It's not for website login. – Harikrishnan Apr 30 '14 at 16:52
Munkeyoto has the right idea, but the wrong section. There's a section for basic authentication. – schroeder Apr 30 '14 at 17:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.