Hi I would like to know if nexpose has option to scan whole maschine (for example. VM) or operating system like Windows 10.
Can you explain me how to do this step by step.
I did it as follows:
Create Site
I defined importance etc.
As assets i entered ip adress of my local host, where I installed nexpose.
And I clicked scan.
Aslo please explain me how to be sure that the scan engine can communicate with the target (I would like to stress, that I installed nexpose on the VM, which I would scan)?
I am not sure what you mean by the ‘whole machine’, you can define what is scanned by what particular scan template you are using. You would want to make sure you are doing an authenticated scan so that you can yield the best results for a more complete picture.
After completing a scan, whether it fails or succeeds, you can download the scan logs and validate by looking through them. This will be evident as it will enumerate all the steps taken in the scan. As a last note, make sure that the ports defined in the template are not blocked by your firewall, local or network.