OS Identification (Plugin 11936)
Ray Van Dolson <[email protected]>
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Message-ID | <[email protected]> |
Hi all, per this blog:
http://blog.tenablesecurity.com/nessus/page/3/ (search down the page
for 11936)
The listed plugins are used to determine the identify of the OS on the
target host. I don't see output of telnet listed there -- would this
be ignored as a factor in determining the OS? In other words:
$ telnet hostname
Trying 10.27.52.76...
Connected to hostname.
Escape character is '^]'.
Red Hat Enterprise Linux Server release 5.2 (Tikanga)
Kernel 2.6.18-92.1.6.el5 on an x86_64
login:
telnet> quit
It seems that this could be used with a high degree of confidence in
determining that this machine is a RHEL 5.2 machine :) Instead, with
the above host and 11936 enabled, I get only a 30% chance that the
machine is running the "Linux kernel".
Anyone know on the telnet thing?
Thanks,
Ray
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus