Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

plugin_set PREFERENCE

Subject: plugin_set PREFERENCE
Date: Sun, 19 Dec 2004 17:17:49 -0800 (PST)
hi,

in writing my own client (well ... not really ... i'm leaning heavily on 
Net::Nessus::ScanLite), i want to ask nessusd to employ only one port 
scanner ... the NMAP (NASL Wrapper) port scanner ... *and* to launch all 
plugins.

i realize that i could include a line like:

  plugin_set => '1;2;3;4 ...'

in a PREFERENCES message ... i.e., that i could specify every single 
plug-in by number ... skipping the port scanners i didn't want.

but by sniffing on NessusWX, i think i discovered another way to do this.


i can merely include:

  plugin_set => '14259',

in a PREFERENCES message ... and i get the results i wanted ... notably 
... nessusd employs only nmap.nasl (plugin #14259) *and* it launches all 
attacks.

that's wonderful ... that's what i want ...

but why does it work?

i would have thought that specifying only plug-in 14259 would have 
resulted in nessusd launching nmap.nasl ... and then quitting when it was 
done ... without launching any attacks.

i've been poking through nessus-core/dox/ntp/* ... thinking i would find 
this behavior documented there ... but no dice.  is this an undocumented 
feature?  if so, how likely is this feature likely to persist, as nessusd 
ages?

--sk

stuart kendrick
fhcrc

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>