SCANNER_SET and gui "Port Scanner" list inconsistent
Hubert Seiwert <[email protected]> Wed, 17 Aug 2005 16:57:56 +0100
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi, I presume SCANNER_SET in .nessusrc is supposed to correspond to the Port Scanner list on the Scan Options tab of the GUI client? I've noticed a few differences - The file is generated as follows (preferences.c): fprintf(f, "begin(SCANNER_SET)\n"); fprintf(f, "10180 = yes\n"); fprintf(f, "10278 = no\n"); fprintf(f, "10331 = no\n"); fprintf(f, "10335 = yes\n"); fprintf(f, "10841 = no\n"); fprintf(f, "10336 = no\n"); fprintf(f, "10796 = no\n"); fprintf(f, "11219 = no\n"); fprintf(f, "14259 = no\n"); fprintf(f, "14272 = no\n"); fprintf(f, "14274 = no\n"); fprintf(f, "14663 = no\n"); fprintf(f, "end(SCANNER_SET)\n\n"); 10278 is Sendmail_ident.nasl and is duplicated in the PLUGIN_SET section. If you enable all plugins in the GUI client, it's turned on in SCANNER_SET and turned off in PLUGIN_SET. In this case it's the only plugin turned off in a list of 9000. This doesn't seem right, I would suggest to remove it from SCANNER_SET unless there is some reason it's in that section. Also, 10331, 10841, 10336, 14274, 14663 are written to the rc but not listed in the GUI list. Of these, 10331 and 10841 are not included with the current plugins package at all, 10336 is the deprecated nmap wrapper written in C, 14274 is snmpwalk_portscan.nasl and 14663 is amap.nasl. 11840, "Exclude toplevel domain wildcard" is present in the GUI but not written to the RC when it's generated. It would be nice if the GUI as well as the RC file generation were updated to be consistent and if deprecated plugins were removed. Maybe this could be rolled in with the fixes for doubled plugin prefs in 2.2.6... Some GUI buttons to save/load the current plugin selection and options to/from a config file would be nice too. It's a bit inconvenient that the only way to save different sets of configs is to change the options, start a scan and then copying the .nessusrc file manually... -- Hubert Seiwert Internet Security Specialist, Westpoint Ltd Albion Wharf, 19 Albion Street, Manchester M1 5LN, United Kingdom Web: www.westpoint.ltd.uk Tel: +44-161-2371028 _______________________________________________ Nessus-devel mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus-devel