Re: Application Fingerprinting & Reporting

Try using a credentialed check. Those will find local applications and tell
you versions. A non-credentialled check normally just hits the ports and can
often only tell version from the banners of externally listening
applications

On 11/19/06, Asthana, Vishal <vasthana@ipolicynetworks.com> wrote:
>  Hi,
>
>
>
> Is there any Nessus plugin that helps report *Application names and
> versions* e.g. Internet Explorer, Yahoo, Firefox etc? There are
> Application *DETECTION* plugins for the same but the post-scan operation
> does not report the *specific Application installed*. It only reports FTP
> Server, Web Server, Oracle Listener etc.
>
>
>
> I have already referred to the following old threads and ensured that *
> find_service.nes* was part of the scan.
>
>
>
> http://mail.nessus.org/mailman/htdig/nessus/2004-February/msg00302.html
>
> http://mail.nessus.org/mailman/htdig/nessus/2004-February/msg00218.html
>
>
>
> I have also tried using *Nmap scanner* instead of the Nessus TCP scanner
> with the same results.
>
> http://www.nessus.org/documentation/index.php?doc=nmap-usage
>
>
>
> Any pointers would be helpful.
>
>
>
> Thanks
>
> Vishal
>
>
>
> _______________________________________________
> Nessus mailing list
> Nessus@list.nessus.org
> http://mail.nessus.org/mailman/listinfo/nessus


--
Doug Nordwall
Unix, Network, and Security Administrator
Noise proves nothing. Often a hen who has merely laid an egg cackles as if
she laid an asteroid. -- Mark Twain

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus