Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have scanned my website using Nessus.But I need to scan it as logged in user since most of the urls are accessible only if we are logged in.How can I set website login credentials in Nessus?

share|improve this question
    
Login mechanisms differs from site to site, can't you just disable the login mechanism or make an auto-login from a certain IP? Otherwise try your favorite search engine –  HamZa Apr 30 at 10:08
    
I have searched in google before asking here..didn't get solution..'Scaning by login mechanism disabled' seems good idea..Will check that... –  Harikrishnan Apr 30 at 17:00

2 Answers 2

up vote 1 down vote accepted

Nessus 5 made a change: It's in the Preferences section:

  • Login configurations
  • HTTP login page

There you can set your HTTP credentials/settings.

This is a basic check in the documentation. Why go Google, when you can RTFM....

share|improve this answer

Nessus has the information posted on their page with a full walk through. http://www.tenable.com/tips/how-to-enable-credentialed-checks-on-windows

share|improve this answer
1  
No. It's for log in to the remote host (Remote login) and scan. It's not for website login. –  Harikrishnan Apr 30 at 16:52
    
Munkeyoto has the right idea, but the wrong section. There's a section for basic authentication. –  schroeder Apr 30 at 17:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.