Good morning,
I tried to follow your different advices on Nessus' FAQ in order to write a
nessus script but I have all the time the same error message:
In the nasl file, there is the following line
buf = ssh_cmd(socket:sock,cmd:"cat /etc/passwd");
But the execution of this scripts gave:
# /usr/local/Nessus-2.2.9/bin/nasl -X -T test1 -s -t localhost
/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl
[8570](/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl) get_array_elem:
requesting character after end of string crypted (1 >= 0)
[8570](/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl) get_array_elem:
requesting character after end of string crypted (0 >= 0)
[8570](/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl) Syntax error
with the send() function
[8570](/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl) Correct syntax
is : send(socket:<soc>, data:<data>
I tried the nessus-update-plugin but this server is disconnected from
internet.
In another part, I tried the solution
buf = pread(cmd:"cat", argv:make_list("/etc/password"));
But the execution gave the following result:
nessus_popen: running cat - /etc/password
Do you know why we always have the character " - " which seems to be
problematic?
Thanks in advance for all
Thomas Nguyen Van (CEH) | OneIT Technical Security Consultant | OneIT
Operations | BT |
E: thomas.nguyenvan@bt.com |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899|
www.btireland.com
BT Communications Ireland Limited
is a wholly owned subsidiary of BT Group plc
Registered in Ireland, Registration No. 141524
Grand Canal Plaza, Upper Grand Canal Street, Dublin, Ireland
This electronic message contains information (and may contain files) from BT
Communications Ireland Limited which may be privileged or confidential. The
information is intended to be for the sole use of the individual(s) or
entity named above. If you are not the intended recipient be aware that any
disclosure, copying, distribution or use of the contents of this information
and or files is prohibited. If you have received this electronic message in
error, please notify us by telephone or email (to the numbers or address
above) immediately. http://www.btireland.ie
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
