Re: Nessus stop by 500 open Ports

Michel Arboi <[email protected]> Mon, 21 Jul 2008 08:37:35 +0200

Newsgroups	gmane.comp.security.nessus.general
Organization	Nessus.org
Message-ID	<20080721083735.40bf6980@casserole>

On Sat, 19 Jul 2008 14:03:48 +0000
MALTE SIMON <[email protected]> wrote:

> Hello, is ther a way to stop Nessus if a Host have more then 500 open
> Ports?

Write an ACT_GATHER_INFORMATION plugin which will declare the host dead if such thing happens.
Something like:

# Insert description...
ports = get_kb_list("Ports/tcp/*");
if (! isnull(ports) && max_index(ports) > 500)
{
  security_warning(port: 0, extra: max_index(ports), ' TCP ports are open\n');
  set_kb_item(name:"Host/dead", value:TRUE);
}
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus