Nessus
[Top] [All Lists]

Thorough test of a Web server

To: <Nessus@list.nessus.org>
Subject: Thorough test of a Web server
From: <Arkadi.Kosmynin@csiro.au>
Date: Fri, 19 Jan 2007 14:55:57 +1100
Cc:
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: Nessus@list.nessus.org
Domainkey-signature: s=email; d=csiro.au; c=nofws; q=dns; b=hoMgOBiA9yQndHOXf+iz8JLW0+ESXJCAcSLbRlGtrSM9OhB2wFtcQ1bpYf87VnyT/3HrokBdDoZzDD2Yh3VEcoeevJ5N09Xhh1F4ZNQNbCOsFbCPYldHU29gergPOcT3;
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
References: <011820071558.11585.45AF993A000E147C00002D4122007504389D0A9B0A03020E900006@comcast.net> <45AFB1CA.70105@tenablesecurity.com>
Sender: nessus-bounces@list.nessus.org
Thread-index: Acc7KEiub5u0y0AvTaauJAOt7paSbAAUepkw
Thread-topic: Thorough test of a Web server
Hello,

I am trying to scan a web site with Nessus. Nessus server and client are
both installed on my computer. The web server is on the local network.

I am using Nessus 3.0.4 on Win XP. I can configure it scan the server,
but I don't think that it does what is expected. The web site has a few
thousand pages, but scan takes only 20-30 minutes (I disable port scans,
except port 80). I select all plugins, except the DoS group. The
webmiror plugin is selected too, but I don't think that it does
anything. 

I see this in scan information:

Nessus version : 3.0.4
Plugin feed version : 200701161815
Type of plugin feed : Registered (7 days delay)
Scanner IP : <removed>
Port scanner(s) : synscan 
Port range : 80
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Max hosts : 20
Max checks : 4
Scan Start Date : 2007/1/18 12:20
Scan duration : 1676 sec

The question is, how do I enable thorough tests? I want as tough scan as
possible, even if it takes a couple days to do.

The other question is, how to get the webmirror plugin working? I do
increase the number of cached pages to the max (99999).

I found a couple of books describing Nessus, but they talk about Nessus
2. The new Nessus 3 interface is intuitive, but not well documented. 

Thanks,

Arkadi  
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>