Nessus
[Top] [All Lists]

Re: Thorough test of a Web server

To: Arkadi.Kosmynin@csiro.au
Subject: Re: Thorough test of a Web server
From: "Justin Seitz" <jms@bughunter.ca>
Date: Fri, 19 Jan 2007 02:34:38 -0600 (CST)
Cc: nessus@list.nessus.org
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: nessus@list.nessus.org
Importance: Normal
In-reply-to: <BF94750921492E4AA5B825026FCE6A24012A20C6@exnswn1-syd.nexus.csiro.au>
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
References: <011820071558.11585.45AF993A000E147C00002D4122007504389D0A9B0A03020E900006@comcast.net> <45AFB1CA.70105@tenablesecurity.com> <BF94750921492E4AA5B825026FCE6A24012A20C6@exnswn1-syd.nexus.csiro.au>
Sender: nessus-bounces@list.nessus.org
User-agent: SquirrelMail/1.4.8
Are you using NessusWX? If so just disable the "Safe" scans, as I believe
this is essentially setting it to thorough.

Then again, it's late and sleep hasn't arrived at my door for days!


JS

> Hello,
>
> I am trying to scan a web site with Nessus. Nessus server and client are
> both installed on my computer. The web server is on the local network.
>
> I am using Nessus 3.0.4 on Win XP. I can configure it scan the server,
> but I don't think that it does what is expected. The web site has a few
> thousand pages, but scan takes only 20-30 minutes (I disable port scans,
> except port 80). I select all plugins, except the DoS group. The
> webmiror plugin is selected too, but I don't think that it does
> anything.
>
> I see this in scan information:
>
> Nessus version : 3.0.4
> Plugin feed version : 200701161815
> Type of plugin feed : Registered (7 days delay)
> Scanner IP : <removed>
> Port scanner(s) : synscan
> Port range : 80
> Thorough tests : no
> Experimental tests : no
> Paranoia level : 1
> Report Verbosity : 1
> Safe checks : yes
> Max hosts : 20
> Max checks : 4
> Scan Start Date : 2007/1/18 12:20
> Scan duration : 1676 sec
>
> The question is, how do I enable thorough tests? I want as tough scan as
> possible, even if it takes a couple days to do.
>
> The other question is, how to get the webmirror plugin working? I do
> increase the number of cached pages to the max (99999).
>
> I found a couple of books describing Nessus, but they talk about Nessus
> 2. The new Nessus 3 interface is intuitive, but not well documented.
>
> Thanks,
>
> Arkadi
> _______________________________________________
> Nessus mailing list
> Nessus@list.nessus.org
> http://mail.nessus.org/mailman/listinfo/nessus
>


_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>