Write a nessus plugin

[Thomas Nguyen Van <thomas.nguyenvan@bt.com>]

Good morning,

I tried to follow your different advices on Nessus' FAQ in order to write a nessus script but I have all the time the same error message:

In the nasl file, there is the following line
        buf = ssh_cmd(socket:sock,cmd:"cat /etc/passwd");

But the execution of this scripts gave:
# /usr/local/Nessus-2.2.9/bin/nasl -X -T test1 -s -t localhost /usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl
[8570](/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl) get_array_elem: requesting character after end of string crypted (1 >= 0)

[8570](/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl) get_array_elem: requesting character after end of string crypted (0 >= 0)

[8570](/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl) Syntax error with the send() function
[8570](/usr/local/Nessus-2.2.9/lib/nessus/plugins/test.nasl) Correct syntax is : send(socket:<soc>, data:<data>

I tried the nessus-update-plugin but this server is disconnected from internet.

In another part, I tried the solution
        buf = pread(cmd:"cat", argv:make_list("/etc/password"));

But the execution gave the following result:
        nessus_popen: running cat - /etc/password

Do you know why we always have the character " - " which seems to be problematic?

Thanks in advance for all
Thomas Nguyen Van (CEH) | OneIT Technical Security Consultant | OneIT Operations | BT | 
E: thomas.nguyenvan@bt.com |Mobile: +353 86 1720 692 | Fax: +353 1 432 5899| www.btireland.com

BT Communications Ireland Limited
is a wholly owned subsidiary of BT Group plc
Registered in Ireland, Registration No. 141524
Grand Canal Plaza, Upper Grand Canal Street, Dublin, Ireland

This electronic message contains information (and may contain files) from BT Communications Ireland Limited which may be privileged or confidential. The information is intended to be for the sole use of the individual(s) or entity named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information and or files is prohibited. If you have received this electronic message in error, please notify us by telephone or email (to the numbers or address above) immediately. http://www.btireland.ie

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus