Re: Architecture of NESSUS

From: Aaron Phillips (aaronwphillips_at_gmail.com)
Date: 11/08/05

  • Next message: David S: "forensics honeypot and properly seperating networks" 
    To: security-basics@securityfocus.com
Date: Tue, 8 Nov 2005 14:10:05 -0500

    On Saturday 05 November 2005 07:12 am, koreshicsi@inbox.ru wrote:
    > Good time of you...
    > We is group of boffins, who want to do more simple scanner then NESSUS.
    > Now there isn't leader of scanners, we want to try to do it. Help us.
    >
    > we need to know the details about NESSUS vulnerability scanner.
    > Like.
    > 1. The ARCHITECTURE of nessus(nessus client and daemon).
    > 2. How nessus is using different O/S tools like, NMAP, HYDRA..
    > 3. Which module is responsible for what? means which module of nessus is
    > interacting with NMAP, which is for HYDRA and HOW?
    > 4. Which module is responsible for customization to scan.
    > 5. How to write plug in for nessus and also enable and disable the
    > plug-in(not by using UI)
    > 6. How to customize the report generation of nessus.
    > 7. How can one integrate nessus with IDS to correlate the report and
    > alert to reduce false alert .
    > 8. How each and every module is interacting with each-other.

    I'd try http://cvsweb.nessus.org/cgi-bin/viewcvs.cgi/ and just start
    browsing...

  • Next message: David S: "forensics honeypot and properly seperating networks"

    Relevant Pages

    • RE: oracle VA/PT
      ... I find it strange that nessus didn't even see an open port on 1421. ... There is a commercial database security scanner out there. ... Up to 75% of cyber attacks are launched on shopping carts, ...
      (Pen-Test)
    • Re: What is being a pen tester really like?
      ... Nessus is a vulnerability scanner and using it to ... conduct a test is called a vulnerability assessment. ... Security experts recommend that an annual penetration test be ... This is NOT something Nessus does, ...
      (Pen-Test)
    • RE: MBSA scanner
      ... With respect to eEye, we do not use nessus as our foundation scanner. ... find that the various non-nessus engines perform quite differently to nessus ...
      (Pen-Test)
    • RE: WIN 2K to *NIX Scanner
      ... If you want to try Nessus but don't currently have a unix box spare, ... WIN 2K to *NIX Scanner ... by default scan all ports. ... I have tried so far the LANguard tool is by far the best ...
      (Security-Basics)
    • RE: MBSA scanner
      ... We just finished a long comparative evaluation of Eeye, Foundstone, ... Tenable, Nessus and ISS. ... while still using Nessus for bulk scans. ... Nessus is still a great scanner, and you cannot beat the price. ...
      (Pen-Test)