pen-test
[Top] [All Lists]

Re: Question about vulnerability scanning

To: pen-test@securityfocus.com
Subject: Re: Question about vulnerability scanning
From: "Nikhil Wagholikar" <visitnikhil@gmail.com>
Date: Thu, 24 May 2007 10:54:20 +0530
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=nU9oEeHps2vECNPI0EvTB5FqBa0u8hFH0Gkz9kvH5bMDUGSZLc0EoySE9NTLZySodIALvZz7yi58H5xXC/n2EWsgwUh/1gTqIbM0uHncB02PzGwAg/oljw0sl4JNPHGoeC9woPI8PAynrJCpByT12H0iZBQ11IB1ixMGzZmHQYE=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=h52TqO3LqA+JHMSzl7/Ps2AbpNZcPP9JnFxSPiIDN/FuYIYCTXHnA6lsJqzT8vejP1J92eFxkg64hqmJcj7LmhDaz9vJQJZo4MopynFdc63Yqi29GGh5QCHMuhdZP+O4ieIiysWIIeuBH9YBnlxXSE1L2xKrGZ3v71Dp6VlUcUI=
In-reply-to: <20070523184831.14076.qmail@securityfocus.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <20070523184831.14076.qmail@securityfocus.com>
Resent-date: Thu, 24 May 2007 18:56:04 -0600 (MDT)
Resent-from: pen-test-return-1078484242@securityfocus.com
Resent-message-id: <20070525005604.46A7E143F8C@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
Hello Andy,

There are couple of Open source vulnerability scanners. Some of them
are as follows:

1. Nessus -- http://www.nessus.org/download/

2.   Asmodeus Network Security scanner for Win NT 4.0 --
http://www.cotse.com/tools/sw/asmod022.zip

3. Co-SARA -- http://www-arc.com/sara/downloads/cosara/cosara-7.3.1.exe

4.      VLAD -- http://www.bindview.com/Resources/RAZOR/Files/vlad-0.9.2.tar.gz

--
Nikhil Wagholikar
Security Analyst

NII Consulting
Web: www.niiconsulting.com


On 23 May 2007 18:48:31 -0000, Andy.Kitzke@insinkerator.com
<Andy.Kitzke@insinkerator.com> wrote:
I had a question and was looking for some information pertaining to it.  I have 
no doubt that this has been covered in the past, but I can't find any emails 
with it right now.


I'm looking for a good vulnerability scanner that I can run from a single 
workstation/server.  I would like somewhat detailed reports about what patches 
are missing and if Anti-Virus is installed.  I know there are many solutions 
out that can be purchased but I'm wondering what free solutions exist and how 
well they stand up to paid for solutions.


If anyone has any information on or white papers about any solutions let me 
know.


Thanks!

Andy

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>