Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

Problems with SMB

Subject: Problems with SMB
Date: Wed, 15 Dec 2004 11:15:05 -0800 (PST)
I am having troubles getting some of the registry needing scans to work
because nessus seems to be dropping my configuration for user name and
password and using blanks.  In other words, I am entering username and
password for valid accounts on the target machine but when the scan comes
back I get a notice:

All the smb tests will be done as ''/'' in domain OLD

I tried modifying logins.nasl to give me notice if smb_user/pass could not
be read from the knowledge base.  I got neither notice.

This computer is in its own workgroup.  It is not a member of a domain. 
This is an XP pro install.  AFAICT the services needed to allow remote
logins and remote access to the registry are in fact started.  If I scan a
different computer that is a member of a domain, and use either a domain
user or a local user it works just fine.  But on this computer, that is
not a domain member, the entered username and password are not used.

One major problem I think is that I am getting no debug information.  I
have no idea why the username and password are not being used as entered. 
Nothing is telling me anything.  It does not appear to be a client side
issue because I use the nessus client that came with core, and my own
using Net::Nessus::ScanLite and both have the same results.

So, for some unknown reason, nessusd is ignoring the username and password
I enter for SMB access and uses blanks.  Does anyone have a clue why?

Thanks.


_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>
  • Problems with SMB, Noah Roberts <=