Re: Service identification
Michael Scheidell <[email protected]>
| Newsgroups | gmane.comp.security.nessus.devel |
|---|---|
| Message-ID | <[email protected]> |
> [so far, this is slower than the current behaviour. Maybe we should > still send the GET request?] > > One or two other NASL plugins will be in charge of sending "HELP / > HTTP/1.0" or "HELP" on "mute" services. > > One NASL plugin will parse the banners and decide if the service can > be identified or if more information is needed. e.g. anything that > answers with something like 3 digits followed by a space or a minus > sign might be a FTP service, NNTP, SMTP etc. Requests like EHLO or > HELP should avoid false identifications. don't forget to ignore 'printers' if asked to. don't want 120 printers to all say 'help' on the first page on every nessus run.!~ -- Michael Scheidell SECNAP Network Security Corporation Main: 561-368-9561 / www.secnap.com We are expanding and need security professionals http://www.secnap.com/careers/ _______________________________________________ Nessus-devel mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus-devel