Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

RE: batch processing

from [Doty, Timothy T.] Network Security [Permanent Link]
Subject: RE: batch processing
Date: Fri, 15 Feb 2008 16:29:05 -0600 
My solution to a somewhat similar problem was to write the nessus
configuration file on the fly. In this method you would need to identify
which plugins fit with which scan types and enable them in the configuration
file. My approach for this would be to use a database and web front end to
manage the scan configurations. You could identify plugins by pluginid, or
family, or one of the other fields.

I got a base configuration file by using NessusClient on linux and copying
the .nessusconfig (or whatever the filename was, I forget) and having that
as a basis.

I would also keep the plugin information in a database (this can be achieved
by having nessus dump SQL insert statements for all plugins -- in my case I
have to tweak these). I also keep the nessus scan results in the database.
This makes for a convenient way to query the results.

There are probably other (possibly better) ways to achieve this, but that's
my two cents.

Tim Doty 

-----Original Message-----
From: nessus-bounces@list.nessus.org [mailto:nessus-bounces@list.nessus.org]
On Behalf Of Holemans Wim
Sent: Friday, February 15, 2008 3:00 AM
To: nessus@list.nessus.org
Subject: batch processing

I want to build an automatic vulnerability scan system based on Nessus.
I have Nessus successfully installed on
one of our unix machines and i have lists of hosts that i want to test every
month. But i want to test them only for certain types of protocols : i have
e.g. a list of hosts i want to test for ssh, another list for http, ...
I looked around to find a document that describes this type of setup or
clues how to setup ssh-only scans but i haven't found anything decent yet.
Has someone done this before and do you have any documents that could help
me develop this type of setup ?

Thanks,

Wim Holemans
Netwerkdienst Universiteit Antwerpen
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: Nessus SYN Scans + Router Issues, Michel Arboi
Next by Date:  ports scanners are getting disabled, Sudheep.P A
Previous by Thread:  batch processing, Holemans Wim
Next by Thread:  ports scanners are getting disabled, Sudheep.P A
Indexes:  [Date] [Thread] [Top] [All Lists]