Questions tagged [nessus]

Nessus is a commercial vulnerability scanner offered by Tenable Security

Nessus is a commercial vulnerability scanner offered by Tenable Security.

Nessus features high-speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of your security posture. Nessus scanners can be distributed throughout an entire enterprise, inside DMZs and across physically separate networks

98 questions
0
votes
1 answer

Nessus Professional - Create scan policy with custom plugins

I need to create a Nessus scanning policy for a custom set of plugins (90+), is there an easier way to do this rather than selecting each plugin one-by-one? I know there is an API you can use, but I'm not sure how to use it. Any help is appreciated!
cyb3ard
  • 11
  • 3
0
votes
2 answers

Nessus does not send e-mail after setting up smtp server

I have entered the following settings in the Nessus SMTP area: Host: smtp.gmail.com Port: 587 Encryption: Force TLS Auth Method: Login username: someuser@gmail.com password: mypass I get the following error once I try send a test e-mail: Error…
kad
  • 13
  • 1
  • 6
0
votes
1 answer

Looping XML into Single Excel Cell using XSLT

Looking to transform (XSL, XSLT to Excel): Microsoft Windows Server 2008 R2…
Sean Perryman
  • 29
  • 1
  • 1
  • 7
0
votes
1 answer

SoftLayer API Nessus Scan Status / Report via PHP

To generate/initiate a new vulnerability scan at SoftLayer, this works (for every server in an account): require_once('SoapClient.class.php'); $apiUsername = "omitted"; $apiKey = "omitted"; $client =…
Cv9
  • 3
  • 1
0
votes
1 answer

how to pass multiple sets of http parameters to access webservices

As i'm working on Nessus scanner, I have to pass parameters to create a scan. the body of the request should be: { "uuid": {template_uuid}, "settings": { "name": {string}, "description": {string}, "emails":…
Nani
  • 1,148
  • 3
  • 20
  • 35
0
votes
1 answer

How to link assets to imported dashboard in Nessus Security Center?

I have a configured dashboard in my Nessus Security Center. For each component, I have set an asset, for example the asset of my Linux machines. Now I will create the same dashboard with the asset of my windows machines. By exporting into an xml, I…
Im-a-train
  • 66
  • 1
  • 7
0
votes
2 answers

Nessus vulnerability scanner reports my classic ASP site still exposed to XSS attack

I am chasing a vulnerability reported on my site written mostly in classic ASP with VBscript. I think the fixes I made should have been sufficient but a "rescan" still shows a "medium risk" item on port 80/tcp: 51972 - CGI Generic Cross-Site…
John Adams
  • 4,773
  • 25
  • 91
  • 131
0
votes
1 answer

Fill out text field within an element

I know there are already some threads about accessing an element within another element...I tried a lot of stuff but I can't get it to work... JSFiddle -> http://jsfiddle.net/YcPc8/2/ What I want to do on the page is to fill out the username and the…
0
votes
2 answers

Python ignoring %s placeholder

I'm trying to check if information is in a dictionary, and if so write to an Excel spreadsheet. However, the information I am checking for is subjective. I've tried using %s as a place holder but Python seems to ignore it, or believes the statement…
user2650856
0
votes
3 answers

PHP - Extract data from string with regex

I need help to do this operation. I Have a string like this: Formatting the report I…
carlo9987
  • 15
  • 1
  • 7
0
votes
1 answer

Nessus No host data is available for this scan error

I encountered an error in Nessus result. Error: No host data is available for this scan. I want to scan ip 192.16x.x.x at Nessus.I scan this ip with nmap.Only 2 tcp port is open in this ip address.And results says host is up.I check my firewall…
dgn
  • 103
  • 5
  • 15
0
votes
1 answer

error with echo command

I'm starting to learn how to script bash and I've run into a problem with the echo command and a variable. #!/bin/bash LOGINOUTPUT = "`wget --no-check-certificate --post-data 'login=redacted&password=redacted' https://nessusserver:8834/login -O…
avorum
  • 2,243
  • 10
  • 39
  • 49
0
votes
1 answer

Nessus XML-RPC API

I'm trying to build an application using Nessus XML-RPC API. I will need to achieve the following: 1) Control start,stop,resume scans in a nessus server from my application. 2) After scan is completed, get all the report data of the scan and store…
Pruthvi Raj Nadimpalli
  • 1,335
  • 1
  • 15
  • 30
0
votes
1 answer

How can I test whether jmx-console.war is being used in JBoss 4.2.2?

There is a file within the .\jboss-4.2.2.GA\server\default\deploy folder, named "jmx-console.war". I am getting a security vulnerability dealing with this module. How can I tell if our application is using this module. I implemented an open…
JustBeingHelpful
  • 18,332
  • 38
  • 160
  • 245
0
votes
1 answer

Nessus command line tool

There is a question, and I think there is no good documentation on the Internets. So I would to ask your help. I want to invoke nessus, programmatically(Windows, .Net). So I am trying to test the nessuscmd switches and options. The problem is that I…
py_script
  • 808
  • 2
  • 16
  • 38