Collaborate Disseminate
After running a Nessus scan, one of its plugins checks for cookie injection called "Web Server Generic Cookie Injection" (https://www.tenable.com/plugins/nessus/44135)
The scan shows that this issue exists on a site. It shows tha… Continue reading Web Server Generic Cookie Injection
I have disabled the firewall and im able to get ping from my local system and metasploitable vice versa,When i go to nessus portal and add the metasploitable IP im not able to scan it, it starts and compete in secs and no reports.
Also in … Continue reading Unable to scan metasploitable machine IP on Nessus [closed]
I did some penetration testing of services reachable by URL and managed to find some vulnerabilities I was looking for. However, now I should run tests for some services that are not reachable by URL, but rather by their IP inside the VPN…. Continue reading How to perform a penetration test with Nessus on a VPN internal service?
I’m getting a "scan interference" finding (plugin 108714) in a PCI DSS scan, and I’ve proven there’s no security products or firewalls or whatever interfering with my scan. I need to know what’s happening before it runs the scan… Continue reading How can I tell where in a packet capture a particular Nessus plugin starts running?
I’m running an Embedded Linux (kernal 3.8.21) with some applications on it on MIPS. I use iptables & ip6tables to block some ports, like the following:
iptables -A INPUT -p tcp –dport 139 -j DROP
ip6tables -A INPUT -p tcp –dport 1… Continue reading How to prevent a port being detected by Nessus scan
I am using a legacy Boa web server, which adopts HTTP instead of HTTPS. Then the Nessus scan found that it doesn’t encrypt confidential data, and specifically, the password in authentication.
How can I make some altercation to the server c… Continue reading How to make Nessus believe that my web server encrypt confidential data, e.g. password when http is employed? [closed]
The host to scan is a telecommunication terminal, which has only one network connection via a cat-5 cable directly to a PC, which installs Nessus to scan the terminal. The terminal has no any other network connections.
The CPU on the termi… Continue reading How to solve Web Server Reverse Proxy Detection vulnerability reported by Nessus [closed]
I have a Fortigate device and a Nessus vulnerability scan set up. When I ran the scan, it said that there was some kind of .htaccess~ file in my Fortigate device. This is the vulnerability it found.
The problem is, I can’t even find a file… Continue reading Nessus vulnerability 11411 in Fortigate
Cloud computing technologies are on the rise today. Read to learn the top cloud testing tools capable of serving any business size in 2022.
The post Top cloud automation testing tools for 2022 appeared first on TechRepublic.
Continue reading Top cloud automation testing tools for 2022
I’m trying to get a better understanding of the technique of SSH tunnels. I have Nessus running within a Kali machine inside my environment and would like to access this a service via the browser on my own machine:
My Kali —-> Jump se… Continue reading Trying to understand port tunnelling