Re: Access the remote Windows Registry / plugin 10400

["Doug Nordwall" <raleel@gmail.com>]

I believe that scanning with credentials on windows generally does not work over ssh, but rather the standard windows login mechanisms, such as IPC$. You will have to put in the credentials into the SMB username and password blanks provided in the credential section. You will also have to use a user who can mount IPC$

I would suggest taking a look at
http://www.tenablesecurity.com/images/pdfs/blended_security_checks.pdf
http://www.nessus.org/documentation/nessus_credential_checks.pdf

On 11/21/06, Patrice.Arnal@alcatel.fr <Patrice.Arnal@alcatel.fr> wrote:

Hello

I set up SSH access on all servers ( Unix & Wintel ) in order to run
internals checks ( patches ... ) on all servers.

The account used is "nessus" and the login is done through keys exchange (
no password )
This works well for netstat ( local port scanner) but the plugin 10400
fails.

A quick glance on the code seemed to indicate that the plugin is trying to
mount IPC$ by providing "login/password"
which obviously fail....

Thank you for the help

Cordialement / Mit freundlichen Grüßen / Best regards,
_____________________________________________
Patrice Arnal
ISS - DataCenter – E&S
Alcatel ICT Services
1rte Dr A.Schweitzer - 67408 - ILLKIRCH - FRANCE
Phone : +33 (0) 3 90 67 74 22 / 2187 74 22
Fax : +33 (0) 3 90 67 72 07
Mobile: +33 (0) 6 06 07 67 68 08
Mailto: patrice.arnal@alcatel.fr
_____________________________________________

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

-- 
Doug Nordwall
Unix, Network, and Security Administrator
Noise proves nothing. Often a hen who has merely laid an egg cackles as if she laid an asteroid. -- Mark Twain
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus