Hi. Im trying nessus scanner with HTTP Brute force, but I have a problem. Could not do HTTP brute force as no valid start page was given in option.
I started nessus & logged in, making the following selections:
disabled all plugins
enabled Brute Force Login (within Misc.)
enabled add dependencies at runtime
selected an existing and readable set of logins and passwords files
selected "Brute force "HTTP"
Under "Scan options"
un-selected all the "Port scanning" buttons
Under "Target Selection"
selected a single host (www.localhost.com
What could be the problem?
Thanks for your help.