Re: Checking for old web browsers and media plugins

[Gary Flynn <flynngn () JMU EDU>]

Adam Carlson wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Have you tried running Nessus scans with credentials against Windows
> systems?  When Nessus can connect to the target system's registry and is
> provided administrator credentials,

I did something similar for a while with the ISS scanner.
Then I got nervous.

What are the implications of this if the target desktop is running
something like pwdump? Does it expose the Nessus administrative
password hash?

--
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature