[TOOL] NessusWC - Nessus Web Management

From: SecuriTeam (support_at_securiteam.com)
Date: 07/20/05

  • Next message: SecuriTeam: "[UNIX] Sophos Anti-Virus Zip DoS Vulnerability" 
    To: list@securiteam.com
Date: 20 Jul 2005 12:53:26 +0200

    The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
    - - promotion

    The SecuriTeam alerts list - Free, Accurate, Independent.

    Get your security news from a reliable source.
    http://www.securiteam.com/mailinglist.html

    - - - - - - - - -

      NessusWC - Nessus Web Management
    ------------------------------------------------------------------------

    SUMMARY

    DETAILS

    NessusWC is a GPL based tool that provides a simple HTTP Web interface for
    the Nessus Security Scanner. It connects to local and remote Nessus
    version 2 daemons via SSL (using OpenSSL libraries), retrieves the
    plugins, configures a scan for a single target host, and saves the results
    in HTML format. As a result, even users with limited security knowledge
    can scan their machines. Scan results are stored in a central place.

    NessusWC development goals were pure simplicity. No Java, PHP, databases
    or other enabling technology must be maintained. No cookies either. Just
    plain CGI technology written in 'C'.

    The benefit is a centrally located scan client that keeps all results in
    one place. The design is kept so simple, even a non-IT person could start
    a scan. The ultimate goal is the design of a ["Scan-Me"] button that takes
    the users IP and gives it a pre-defined scan as a self-service
    application.

    NessusWC has been developed for use with a Apache webserver under Linux,
    connecting to a Nessus v.2.2.0 server and is using libraries such as:
     * GNU libc
     * OpenSSL
     * CGIC

    To download NessusWC:
    <http://www.frank4dd.com/nessuswc/nessuswc-v1.2.tar.gz>
    http://www.frank4dd.com/nessuswc/nessuswc-v1.2.tar.gz

    ADDITIONAL INFORMATION

    The information has been provided by Frank4DD.
    To keep updated with the tool visit the project's homepage at:
    <http://www.frank4dd.com/nessuswc/> http://www.frank4dd.com/nessuswc/

    ========================================

    This bulletin is sent to members of the SecuriTeam mailing list.
    To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
    In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

    ====================
    ====================

    DISCLAIMER:
    The information in this bulletin is provided "AS IS" without warranty of any kind.
    In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

  • Next message: SecuriTeam: "[UNIX] Sophos Anti-Virus Zip DoS Vulnerability"
    • Quantcast