Penetration Testing mailing list archives

Re: custom nessus frontend


From: "Nathaniel Hirsch" <morgothan () gmail com>
Date: Mon, 11 Aug 2008 09:43:10 -0400

I am not a lawyer but I think this would violate the terms of service
for Nessus.  Sections 1.4. and 1.5. of nessus's terms of service talk
about stuff like this, and it pretty much says without written consent
from tenable it isnt allowed.  So if you ask for consent and get
permission to do it, they will probably give(sell) you the API. Other
then that I dont think you can do it.
Nathaniel Hirsch, CISSP



On Sun, Aug 10, 2008 at 7:19 PM, Robin Wood <dninja () gmail com> wrote:
Hi
I'd like to have a go at writing a custom client for nessus to go with
an app I'm creating. I've been trying to find docs on how to do it, or
at least an API, but can't find anything. I assumed that as it was a
client server model that there would be some kind of published API but
I'm guessing as it is now closed source maybe there isn't.

I could use nasl and call that but I'd rather interact directly with the server.

Can anyone point me at something I've missed or give me some pointers?

Thanks

Robin

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------


Current thread: