|
Hi Anthony:
I dont think you are right. Here is the script that
would run for a plugin that has
80 in its script_require_ports line. Consider the
plugin a1stats.nasl
script_require_ports(80,"Services/www");
port = get_kb_item("Services/www");
if (!port) port = 80
if (get_port_state(port))
for each_dir(cgi_dirs...
From this I presume, if a mail server, and not an
http server, were running on port 80, and
no http server were running anywhere, the
get_kb_item for Services/www wouldnt be
populated and you would get a NULL or false? for
the get_kb_item line. so port in
the next line would be set to 80.
And then the plugin for http would
run.
In other words, both http and mail server plugins
would run on 80.
That is what I think. Well, can anyone tell if
there is anything wrong with my
above explanation?
regards,
Samir Kelekar
Teknotrends Software
Bangalore
----- Original Message -----
Sent: Tuesday, February 24, 2004 10:09
AM
Subject: Re: Question concering how
nessus works when servicing are not running on their standard ports
Hi Samir,
Read the this question (very similar to yours). In short, if you were
runnning a mail server on the web server port, I dont *think* that the web
server plugins will be run at all (though, as you noted, the mail server
plugins will be run).
Regards,
Antony
On Thu, Feb 19, 2004 at 03:28:59AM -0800, alan donald
wrote:
> I am a bit confused. I dont seem to understand
how
> nessus is knowing which application is
running.
> Since
> it has to know this information in
order to launch
> an
> exploit.
>
> Is it just matching a banner
> OR
>
does it have a database of responses for each
> application like
maybe nmap does.
> OR
> It is fingerprinting the
application in some other
> way.
It recognizes the
application based on the banner and/or error message
replied to the request
it sent. find_services.nes has been doing that
for a couple of years
now.
--
Renaud
_______________________________________________
Samir
Kelekar <[EMAIL PROTECTED]> wrote:
Hi:
I have a question concerning how nessus runs
when services are not running on their standard
ports.
For instance, if I were to run an smtp server
on port 80, and no http server at all.
I note that the find_services.nasl plugin will
be first run and it will fill up the kb item concerning
smtp to 80. The item concerning http will not
be filled.
Now, the plugins corresponding to smtp will run
properly, since they will be run on the
port corresponding to the kb item for smtp.
However, what will happen to the plugins corresponding
to http?
Since the kb item corresponding to http is not
filled, will these plugins assume that http runs
at the default port, that is 80, and even these
plugins will be run on the service (in this case smtp)
that runs on port 80?
Appreciate a clarification.
regards,
Samir Kelekar
Teknotrends Software
Bangalore
_______________________________________________
Nessus
mailing
list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus
Find local movie times and trailers on Yahoo! Movies.
| 