Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]

Re: Perl-Script started from PHP

Subject: Re: Perl-Script started from PHP
Date: Tue, 20 Dec 2005 09:56:29 -0500
On Tue, Dec 20, 2005 at 02:23:33PM +0100, B. R. wrote:

Now I have a Website (HTML/PHP), where i can input the target-IP. After a 
click on the "Go!"-Button i want to have the Perl-Script run.
The Button has this function: system("/opt/lampp/htdocs/attacker/testn.pl
After clicking it, the Script runs...it pings the target-pc, it nmaps 
it...and it writes an email...but the nessus-script is not activated! Also 
the nessusd.messages File gets no new entries! Can someone help me?

In addition to what others have suggested, you might also make sure the
userid under which CGIs are run can call nessus in batch. For example,
if you're using SSL for Nessus communications, then the client may be
prompting you interactively to verify nessusd's SSL certificate or
select an SSL paranoia level.

As an aside, I wonder whether calling nessus directly from a CGI script
is a good idea. Do you plan to keep the HTTP connection open however
long the scan takes?


George
-- 
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>