Penetration Testing mailing list archives

Re: nessus which plug'in reports which vulnerability?


From: Javier Fernandez-Sanguino <jfernandez () germinus com>
Date: Mon, 23 Feb 2004 16:59:56 +0100

cissper wrote:
Hi all

Any ideas guys?

The Nessus HTML gives you a 'Nessus ID'[1] which is the plugin # for Nessus. Check out http://cgi.nessus.org/plugins/dump.php3?id=XXXX afterwards (I believe the HTML report has links to that)


You can also use the .nbe report use it to generate the HTML (or generate both at the same time) and then parse the information from the nbe as needed:

results|XXXXXX|XXXXX|www (80/tcp)|10330|Security Note|A web server is running on this port\n

The 10330 is the find services plugin.

This question should have been directed to the nessus-users mailing list better.

Regards

Javi

[1] Check out the sample at http://www.nessus.org/demo/report.html

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_pen-test_040219
----------------------------------------------------------------------------


Current thread: