Re: nessusrc how to update profile

On Wed, Oct 26, 2005 at 10:39:15AM -0400, Mihai Petre wrote:

> I'm using George's nessusrc script to update the profile before starting
> a scan.
> few questions :
> How to always include more than 1 plugin in the list ( and to always
> exclude more than 1)

You could list each id separately or enclose the list in quotes; eg,

  update-nessusrc -i 10180 -i 10335 ...
  update-nessusrc -i "10180,10335" ...

> How to exclude ip ?
> I know the auth file in the user profile and the deny each ip one by one.
> Is there an option to enter them as range ? deny 192.168.2.34 to 87

As far as I know, you can only specify in a rule an IP address, a range
in CIDR notation, or the string "client_ip". The best you can do then is
6 rules; ie,

                         --- snip, snip, snip ----
theall@garlic>aggis -q 192.168.2.34 - 192.168.2.87

The range of nets from 192.168.2.34 to 192.168.2.87/32 can be
represented by:

      192.168.2.34/31  (  2 hosts: 192.168.2.34 - 192.168.2.35 )
      192.168.2.36/30  (  4 hosts: 192.168.2.36 - 192.168.2.39 )
      192.168.2.40/29  (  8 hosts: 192.168.2.40 - 192.168.2.47 )
      192.168.2.48/28  ( 16 hosts: 192.168.2.48 - 192.168.2.63 )
      192.168.2.64/28  ( 16 hosts: 192.168.2.64 - 192.168.2.79 )
      192.168.2.80/29  (  8 hosts: 192.168.2.80 - 192.168.2.87 )
                         --- snip, snip, snip ----

George
-- 
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus