The Getting ready section for this recipe is same as the Getting ready section of the Selecting a compliance scan policy section. This recipe will also require you to have studied and practiced the previous recipes in this chapter. Metasploitable consists of multiple vulnerable applications. In this recipe, we will be using DVWA to demonstrate Nessus' capability to perform web application tests:

The default login credentials for the DVWA application are admin for the Username field and password as the Password, as follows: