Collaborate Disseminate
I want to scan with Nessus a network which include OT devices but I don’t know how can I config Nessus to do it.
Firstly, I disable ping scan, before of Nessus scan I do a IP enumerate with Nmap, and Service Discovery option… Continue reading Nessus for Operational Technologies
I need to write a script (I am not asking for script !) in order to verify if target Servers are available (Up or Down) for Nessus scan or not. The problem is that, sometimes even if ping does not work on target IP address, N… Continue reading Nessus Target Availability
I have to replace NMAP with Nessus. I got answer for few settings, but there are few settings in NMAP for which I am not able to get answer. If you could answer me, it would be helpful.
For example,
NMAP Option “-Pn” – U… Continue reading Replace Nmap with Nessus
My objective is to find network vulnerabilities. I have used Nessus and NMAP both for vulnerability scan. I have to verify if I can use only “Nessus” rather than using “NMAP”.
According to my efforts on the web, plenty of p… Continue reading Nessus Port scan Vs NMAP Port scan
what is the best practices to minimise the 2000 Vulnerabilities in Nessus scan reports before sending to infra team??
Continue reading What is the best practices to minimise Vulnerabilities in Nessus [on hold]
Performed credentialed Vulnerability scan on linux/Unix servers by Nessus and thousand of vulnerability came out of port tcp/0. How could a IANA reserved port(tcp/0) handle traffic? Are those vulnerability truly countable or … Continue reading Tons of vulnerabilities are found on tcp/0 port using vulnerability scanners
Performed credentialed vulnerability scan on Linux/Unix servers with Nessus and thousands of vulnerabilities are found on port tcp/0.
How could an IANA reserved port (tcp/0) handle traffic? Are those vulnerabilities true or false positives… Continue reading Tons of vulnerabilities are found on tcp/0 port using vulnerability scanners
I am carrying out an authenticated scan with nessus.
I am using a local admin account on the host to be scanned.
Also the netbios and smb ports (139, 445) are open. Nessus is running from an admin account.
But still the a… Continue reading Nessus authenticated scan fails [on hold]
I know that there are compliance checks for Unix/Linux and Windows systems to look through files for pre-defined types of PII, but is there any way to scan a web application for PII? (Plugin or otherwise…)
Or should I just… Continue reading Is there any way to use Nessus to scan web applications for PII?
I am having serious problems using Nessus for web application scanning. I am unable to get Nessus to login with the credentials I’ve provided it.
The best response I can get is “Nessus is not sure whether or not the authent… Continue reading Nessus Web Application scanning credentials issues? [on hold]