Re: How to correctly modify nmap.nasl?

Michel Arboi <[email protected]>
Newsgroups gmane.comp.security.nessus.general
Organization Nessus.org
Message-ID <20080508092257.365f0921@casserole>
On Thu, 8 May 2008 11:02:21 +0400
"Taras Ivashchenko" <[email protected]> wrote:

> I prefer to use Nmap as scanner's backend  using nmap.nasl plugin
> (http://www.nessus.org/documentation/nmap.nasl).

#mode dead_horse_beating on
This is certainly a bad idea, for kazillons of reasons that have
already been exposed here.

I am convinced that we should simplify this plugin and allow only
imports of Nmap results. That is the only sane way to use it.

> And so we need to replace -P0 with -PN in plugin's source.

And break the plugin with old Nmap?

> And I can't use this plugin :(

Set in nessusd.conf :
nasl_no_signature_check = yes
or sign the plugin with your own key, and add it
to /opt/nessus/var/nessus/ (IIRC)

-- 
http://www.bigfoot.com/~arboi		http://ma75.blogspot.com/
PGP key ID : 0x0BBABA91 - 0x1320924F0BBABA91
Fingerprint: 1048 B09B EEAF 20AA F645  2E1A 1320 924F 0BBA BA91
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.