testing for common/default passwords

Bill Petersen <[email protected]> Tue, 27 Sep 2005 08:09:31 -0500
Newsgroups gmane.comp.security.nessus.devel
Message-ID <[email protected]>
I would like to run a simple test against a group of systems.
I want to only test for
1. No passwords for ids like root, oracle, mysql, etc.
2. Default userid & passwords

Is there any easy way to tell nessus to JUST do this type of test?


By going to a site like
http://www.cirt.net/cgi-bin/passwd.pl?method=csv
I can get a list of common default user ids and passwords.

I would like nessus to use this list of ids and passwords in its tests.
Is that possible? (with some reformatting I assume)



-- 
Bill Petersen, CISSP
Senior Information Security Analyst
Alcatel North America Information Security
[email protected]
Voice: 972-519-4249
Fax:   972-477-5300

_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel