Nessus
[Top] [All Lists]

RE: Options for command line scanning

To: "Doug Nordwall" <raleel@gmail.com>
Subject: RE: Options for command line scanning
From: "Kevin Reiter" <KReiter@insidefsi.net>
Date: Wed, 28 Feb 2007 10:04:46 -0500
Cc: "Nessus List \(E-mail\)" <nessus@list.nessus.org>
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: nessus@list.nessus.org
In-reply-to: <752305c00702280645m15093e06s6efef3a70cda41fc@mail.gmail.com>
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
Sender: nessus-bounces@list.nessus.org
Thread-index: AcdbR0q3niQsoLUiSSyguFngbHkKLwAAR0sA
Thread-topic: Options for command line scanning
Hmm..  So if I write another script to modify the port_range section of the 
.nessusrc file to define the ports to scan, what is the format?  Is it similar 
to the Nmap '-p' syntax?

Something like:

- run Nmap to discover open ports on a host and output to ports.txt
- use cat/sed/awk/whatever to rewrite the port_range line in .nessusrc from 
ports.txt
- call nessus using the following syntax:
nessus -q -x -V -T html -c .nessusrc localhost 1241 username password host.txt 
test.html

I'm testing it now to see if that works.

Thanks!

-----Original Message-----
From: Doug Nordwall [mailto:raleel@gmail.com]
Sent: Wednesday, February 28, 2007 9:45 AM
To: Kevin Reiter
Cc: Nessus List (E-mail)
Subject: Re: Options for command line scanning


ya.

set up a nessusrc file with the ports you want (port_range in the configuration 
file) and point the command line at that nessusrc file (it's one of the options)

should be just 

/opt/nessus/bin/nessus -q -T format -c nessusrc server port user password 
targetfile resultsfile 


On 2/28/07, Kevin Reiter <KReiter@insidefsi.net> wrote:
Hi all,

I'm trying to setup a cron job to scan certain hosts on specific ports (output 
from a previously-run nmap scan), but every option I've tried just displays the 
help screen.  Is it possible to do this from the command line?  I know how to 
do it with a GUI client, but I'm trying to automate the process.  Any 
assistance would be most appreciated. 

O/S: FreeBSD 6.2
Nessus Server/Client: 3.0.5


Kevin Reiter
Senior Security Engineer
Financial Services, Inc.
21 Harristown Road
Glen Rock, New Jersey 07452
(201)652-6000, ext. 588
PGP ID: 0xEE665233 

This message may contain confidential or proprietary information and is 
intended solely for the individual(s) to whom it is addressed.  If you are not 
a named addressee you should not disseminate, distribute or copy this e-mail or 
act upon the information contained herein.  Please notify the sender 
immediately by e-mail if you have received this e-mail by mistake and delete 
this e-mail from your system. 

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus 




-- 
Doug Nordwall
Unix, Network, and Security Administrator
Noise proves nothing. Often a hen who has merely laid an egg cackles as if she 
laid an asteroid. -- Mark Twain 
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>