On Thu, Oct 17, 2002 at 10:45:23AM +0100, rambus bangalore wrote:
> hi !,
> 1) Using Nmap(3.00 version, -O option) we
> will come to know target machine's operating system
> and version.
> 2) We can enable only those plugins specific
> to target machine's operating system.
And the day you scan an OpenBSD box which forwards all data going to
port 139 to the nearest windows NT, you're screwed.
While it's moderately safe to assume that a banner will tell the truth
when scanning a service (not many admins modify them in the end),
removing whole checks just because the remote host *seems* to be running
a given OS is extremely dangerous.
-- Renaud
-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.
