Re: Application Fingerprinting & Reporting

["Doug Nordwall" <raleel@gmail.com>]

Try using a credentialed check. Those will find local applications and tell you versions. A non-credentialled check normally just hits the ports and can often only tell version from the banners of externally listening applications

On 11/19/06, Asthana, Vishal <vasthana@ipolicynetworks.com> wrote:

Hi,

 

Is there any Nessus plugin that helps report Application names and versions e.g. Internet Explorer, Yahoo, Firefox etc? There are Application DETECTION plugins for the same but the post-scan operation does not report the specific Application installed. It only reports FTP Server, Web Server, Oracle Listener etc.

 

I have already referred to the following old threads and ensured that find_service.nes was part of the scan.

 

http://mail.nessus.org/mailman/htdig/nessus/2004-February/msg00302.html

http://mail.nessus.org/mailman/htdig/nessus/2004-February/msg00218.html

 

I have also tried using Nmap scanner instead of the Nessus TCP scanner with the same results.

http://www.nessus.org/documentation/index.php?doc=nmap-usage

 

Any pointers would be helpful.

 

Thanks

Vishal

 

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

-- 
Doug Nordwall
Unix, Network, and Security Administrator
Noise proves nothing. Often a hen who has merely laid an egg cackles as if she laid an asteroid. -- Mark Twain
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus