Hi. Im trying nessus scanner with HTTP Brute force, but I have a problem.
Could not do HTTP brute force as no valid start page was given in option. shows up.
I started nessus & logged in, making the following selections:
Under "Plugins"
disabled all plugins
enabled Brute Force Login (within Misc.)
enabled add dependencies at runtime
Under "Prefs."
selected an existing and readable set of logins and passwords files
selected "Brute force "HTTP"
typed "www.localhost.com/admin/default.asp"
Under "Scan options"
un-selected all the "Port scanning" buttons
Under "Target Selection"
selected a single host (
www.localhost.com)
What could be the problem?
Thanks for your help.
