Re: Windows info from the registry

On Oct 18, 2007, at 6:07 PM, Andrew Court wrote:

> Hi,
>
> Sorry if this has been asked before but I could not find it  
> elsewhere. You can find various information by having nessus log  
> into a machine and search the registry for certain keys. Does  
> anyone know is it possible to obtain the following information from  
> an existing plugin? If not, would it be easy enough to modify a  
> plugin to check for these items?
>
> 1. hostname - I know this can be gotten from the SMB share, but it  
> would be nice to get the details in one report
This info is set in the KB if you need it

> 2. List of Network cards, their Mac address, and any IP/mask assigned

plugin 24272. It uses the WMI interface so you need administrative  
privileges and nessus 3.

> 3. Routing table

24272.
> 4. Hardware spec - Make, model, cpu size, memory size etc

24270 - WMI
> 5. Disk size, partitioning, and RAID number

No.

> I know these things should be gotten from a network inventory, but  
> I have been asked could nessus do these checks.

You can do your own plugin to get this information with WMI. In this  
case you will need nessus 3.1.4 beta to use the new wmi nlib :

http://blog.tenablesecurity.com/2007/02/advanced_nesssu.html
http://blog.tenablesecurity.com/2007/03/nessus_32_beta_.html


Nicolas
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus