Questions tagged [nessus]

Nessus is a commercial vulnerability scanner offered by Tenable Security

Nessus is a commercial vulnerability scanner offered by Tenable Security.

Nessus features high-speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of your security posture. Nessus scanners can be distributed throughout an entire enterprise, inside DMZs and across physically separate networks

98 questions
0
votes
1 answer

Tenable API with JSON request object Integration error

I'm having this error when running the following code (it's not full). The error is the following and I couldn't get past it so far: org.json.JSONException: A JSONArray text must start with '[' at 1 [character 2 line 1] at…
0
votes
0 answers

Nessus Python script ChunkedEncodingError 104 Connection reset by peer

I want to use a Python Script to access Nessus API and start a scanning . I have installed my Nessus service on my Ubuntu Virtual Machine https://127.0.0.1:8834 , here is my code (I hide my accesskey and secretkey): import json import warnings from…
0
votes
0 answers

How Can I Use Wildcard For Tagging Servers based on Their Operating System in Tenable

so I recently had tenable.io deployed in our environment for vulnerability management. I am creating tags that dynamically pull and group assets based on certain properties of the assets. I want to create a tag that groups servers together, and i…
0
votes
1 answer

Getting this error: curl: (3) Host name ' --url' contains bad letter

I am trying to run this line on a linux machine: curl --request GET \ --url 'https://www.tenable.com/downloads/api/v2/pages/nessus/files/Nessus-10.4.2-ubuntu1404_amd64.deb' \ --output 'nessus.deb' but I am getting this error: curl: (3) Host name '…
0
votes
0 answers

Will Nessus "professional" compliance module scan the configuration of multiple EC2 instances of s3 buckets on AWS

Basically want to know if it will be enough. Going to perform a Nessus professional compliance scan for AWS with programmatic access. Will it scan the configuration of multiple buckets or virtual machines running on the account. I can see that it…
0
votes
0 answers

Powershell Foreach loop to return ID data

I am currently trying to create a foreach loop to take each value from a list and search for it in return data from an API. For some reason I am getting NULL data when I try to loop it. $agentList = (Import-CSV -Path…
Derek
  • 1
0
votes
0 answers

TripWire Vs Nessus Scan

In Nessus scan, we didnt get the issue where as with the same build using Tripware we got the issue CVE-2015-7575, how to get the details as how tripwire reported this issue and solution for the same ?
Umapat
  • 21
  • 1
  • 3
0
votes
1 answer

PowerShell: Working with the error from Standard Out (using Nessus Essentials)

Trying to use PowerShell to capture the running status of the "Nessus Essentials" software product. Simply trying to capture product status: running, not running, or other. Getting the below error each time. I've tried changing `-like` to `-match`…
T-Heron
  • 5,385
  • 7
  • 26
  • 52
0
votes
0 answers

How to disable TLS1.0 on specific port in linux(RHEL)

We are running our java application on RHEL 8.5 OS platform. We are using the Apache 2.4.35 version. And we made the changes in ssl.conf file like below, SSLProtocol -ALL +TLSv1.2 SSLCipherSuite…
Learner
  • 91
  • 2
  • 9
0
votes
1 answer

Vulnerability assessment on a website deployed on VM

I'm tasked to do a vulnerability assessment on the OWASP Juice shop that is hosted on a VM. The VM that is provided to me is running on VMWare (no UI, only an IP address to access the website with a custom port number). I've used Nmap, Nikto,…
Ray
  • 43
  • 4
0
votes
0 answers

Ansible for event automation with Cisco Nessus device. need to extract past 15 minutes logs from show clock of the device

What I am trying to achieve with this ansible code: Ansible code should be triggered during an interface flapping with cisco nessus device. It should fetch the time of nessus device(show clock) and try to pull the past 15 minutes from the "show…
0
votes
0 answers

Using powershell to re-link Tenable Nessus Agent

I have several, systems (MS OS) that have the Tenable Nessus agent installed in my environment. I am attempting to re-link the agent to the management portal via PowerShell. I will be using SCCM to execute, the script so I created a simple PS script…
WRCKid
  • 19
  • 3
0
votes
1 answer

Repeat a Python Function - execute the same number of times as entries in a list

Recently I found a python module for one of our COTS products (Tenable) here at the office. It was developed to help access the product's API. I have it installed in my lab here alongside Python 3.9.10 and based on my observations it is working ok.…
Rudy Gee
  • 11
  • 3
0
votes
1 answer

Can I make a Call with NASL to run a C++ programm?

We are working on a project with Nessus Attack Scripting Language ( NASL ) and we would like to run a programm written in C++. I want to ask, is it even possible to run another Script with NASL? So we would like to run the NASL script, which runs…
LostJosh
  • 15
  • 1
  • 5
0
votes
0 answers

Ansible Cant extract json from URL but Curl can. What am I missing?

Im having some trouble with Ansible URI module when pulling json from a specific web site. Ansible Code: - name: check for Tenable Agent updates. uri: url: https://www.tenable.com/downloads/api/v1/public/pages/nessus-agents …