Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

Re: plugins

Subject: Re: plugins
Date: Thu, 16 Sep 2004 23:47:47 -0700 (MST)
On Thu, 16 Sep 2004, net sec wrote:

1) Are all of the plugins listed on nessus.org/plugins loaded by default in the current stable version when installed and updated using update-nessus-plugins? The reason for my question is whether it makes any sense for me to look at nessus.org to discover additional plugins that may be useful for me. I have browsed through the expansive Windows list and the order differs between the web site and the app so I am having difficulty determining if they are the same list.


See my last post about plugins being enabled by default. However, there are a ton of plugins in the archive that are not compatible with the current stable Nessus release (2.0.x) and only work with the development branch (2.1.x). Most notably are the thousands of plugins for the local security checks functionality in the new development branch.

If you are running the current stable relase, and your Nessus server is loading somewhere in the ballpark of ~2430 plugins, then you have all of them.


2) Is there a way for me to create a 'profile' that will allow me to save settings for a session in terms of enabled plugins/settings etc? What I am looking for is to create a profile for cisco, windows, unix etc. and easily be able to tailor my scan to the applicable system.


Just create seperate .nessusrc files for each "profile" you want. This is quite simple. Check out one of the two update-nessusrc scripts available to do this very easily and automated:

    http://www.tifaware.com/perl/update-nessusrc/
    http://www.edgeos.com/resources/

~Jay

--
..
..  Jay Jacobson
..  Edgeos, Inc. - 480.961.5996 - http://www.edgeos.com
..
..  Network Security Auditing and
..  Vulnerability Assessment Managed Services
..

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>