Many attackers are arrested due to the evidences obtained by computer forensics. Symantec Internet Security Threat Report 2014 is showing a horrified fact, that when an attacker looked for a site to compromise, one in eight sites made it relatively easy to gain access. We assume that the attacker was careless and did not perform any anti-forensic techniques on its machine. We use post-mortem computer forensic analysis of attacker and victim machine to find some artefacts in them, which can help to identify and possible to reconstruct the attack, and most important, to obtain valid evidence which holds in court. In this paper, we use an attack scenario against the known vulnerable web application WackoPicko, using several web attacks: SQL injection, stored and reflected XSS, remote file inclusion, and commandline injection. First, the victim machine usually gives some data, which are then used for identifying possible suspects, and this is followed by forensic analysis of suspects' devices, like computers, laptops, tablets, and even smart phones. For attacks against web applications, web application forensics is the branch which gives most of the answers. Digital forensics is one of our biggest line of defense against cyber criminals, because it provides evidence against them. Nessus will run on the secure channel https and on the port number 8834.Symantec Internet Security Threat Report 2014 is showing a horrified fact, that when an attacker looked for a site to compromise, one in eight sites made it relatively easy to gain access. Then open your browser and type this in the URL of the browser

After the update complete, run your Nessus It will take some time because plugin is being updated. opt/nessus/bin/nessus-fetch -register xxxx-xxxx-xxxx-xxxx-xxxx

After you get the key, run this command, fill change xxxx-xxxx-xxxx-xxxx-xxxx with your key Now register to Nessus website to get your activation code that send to your email. Run this command to download and install Nessus.Īfter install it, create an account with adduser command like this If you have internet connection you can install Nessus from repository. Read my post before about How to Install Package on Backtrack 5 after you install it, skip to step two. Download the Nessus package from and install it manually.

How to use nessus backtrack 5