Re: how to learn nessus - reg

On Thu, Sep 29, 2005 at 08:47:30AM -0700, uber haxor wrote:

> Also remember these
> tools have a purpose. It was a two million dollar outage that I was
> troubleshooting for ten hours because our Information Assurance Green
> Team set Nessus to run automated and had their flags wrong. The result
> was a DoS from the inside of the network, and with all the
> disinformation that we received, it took way too long to figure it
> out.

Amen to that!

In an earlier life, I administered a mission-critical mail system for a
hospital that crashed several times because, we later found out, the
security administrator was playing around with nmap! The problem wasn't
with nmap per se but with the vendor's poorly designed TCP/IP stack --
any scanner would have caused it to crash.

I suppose you could think of scanner as a chef's knife -- if you're not
careful, you can hurt yourself really badly; but in the hands of a
skilled chef, it can produce some terrifc results.

George
-- 
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus