NESSUS and Multiple SNMP Strings

[paul at pauldotcom.com (Paul Asadoorian)]

You sure can, however, if a new version comes down over the feed your
changes will be overwritten.  Also, you will need to restart Nessus
after making the change to the plugin (You also have to use the "-t"
flag so that Nessus checks the timestamp and recompiles the modified
plugin to pick up on your changes).

Cheers,
paul

On 4/8/10 12:19 PM, Bugbear wrote:
> Can you edit the plugin?
>
> On 4/8/10, Cody Dumont <CDumont at nwnit.com> wrote:
> > That is the field I am talking about...
> >
> > I tend to find that customer might use 10 or more sometimes SNMP
> > strings...and if you would be nice if I could enter them all into that
> > field...
> >
> >
> > On Apr 8, 2010, at 9:53 AM, Paul Asadoorian wrote:
> >
> > Hi Cody,
> >
> > I believe you are referring to the SNMP Settings (Under Prefernces in
> > the Nessus policy).  There is a field for "Community Name" and the
> > default is set to "public".  I'm not exactly certain where these values
> > get used, but I will ask.
> >
> > There is also plugin 10264, SNMP Agent Default Community Names.  This
> > plugin will test for various SNMP community strings.  If thorough tests
> > is NOT enabled it will test for "private", "public" and "cisco".  If
> > thorough tests are enabled, the plugin adds ~50 more community strings
> > to try (Including "freekevin", which is just strange :).
> >
> > Hope that helps!
> >
> > Cheers,
> > Paul
> >
> > On 4/8/10 8:47 AM, Cody Dumont wrote:
> > Greeting All,
> >
> > Paul, all knowing one of NESSUS...
> >
> > Can use multiple SNMP strings in NESSUS scanner?  I have looked high
> > and low, but all the documentation only says to enter the SNMP
> > string.
> >
> > Thanks...
> >
> > Cody
> >
> > Note: This message and any attachments is intended solely for the use
> > of the individual or entity to which it is addressed and may contain
> > information that is non-public, proprietary, legally privileged,
> > confidential, and/or exempt from disclosure.  If you are not the
> > intended recipient, you are hereby notified that any use,
> > dissemination, distribution, or copying of this communication is
> > strictly prohibited.  If you have received this communication in
> > error, please notify the original sender immediately by telephone or
> > return email and destroy or delete this message along with any
> > attachments immediately.
> >
> > _______________________________________________ Pauldotcom mailing
> > list Pauldotcom at mail.pauldotcom.com<mailto:Pauldotcom at mail.pauldotcom.com>
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main
> > Web Site: http://pauldotcom.com
> >
> > --
> > Paul Asadoorian
> > PaulDotCom Enterprises
> > Web: http://pauldotcom.com
> > Phone: 401.829.9552
> >
> >
> > Cody B Dumont
> >
> > [cid:3337940533_6775659]
> >
> >
> >
> >
> >
> >
> > CISSP, CCSP, CCIP, CCNP, MCSE, CNE
> > NWN STAR  - Senior Security Consultant
> > 603.785.2665 mobile l cdumont at nwnit.com<x-msg://46/cdumont at nwnit.com>
> >
> > STAR - Proactive, cost-effective security with a business focus ? going from
> > good to great!
> >
> > NWN Security Blog ?
> > http://nwnsecurity.blogspot.com<http://nwnsecurity.blogspot.com/>
> > <http://www.twitter.com/nwnsecurity>NWN Security Twitter ?
> > http://www.twitter.com/nwnsecurity
> > <http://www.twitter.com/nwnsecurity>Facebook Profile -
> > http://www.facebook.com/kevinbfiscus
> > NWN STAR Facebook Page - http://www.facebook.com/NWNSTAR
> >
> >
> >
> >
> > ________________________________
> > Note: This message and any attachments is intended solely for the use of the
> > individual or entity to which it is addressed and may contain information
> > that is non-public, proprietary, legally privileged, confidential, and/or
> > exempt from disclosure. If you are not the intended recipient, you are
> > hereby notified that any use, dissemination, distribution, or copying of
> > this communication is strictly prohibited. If you have received this
> > communication in error, please notify the original sender immediately by
> > telephone or return email and destroy or delete this message along with any
> > attachments immediately.

-- 
Paul Asadoorian
PaulDotCom Enterprises
Web: http://pauldotcom.com
Phone: 401.829.9552