I mentioned this a while back but didn't see anyone respond.. Without the option for disabling dangerous plugins how can someone enable some specific dangerous plugins along with the safe ones without going through a long manual checking process.
Old method: -------------- Disable All Enable All but dangerous manually turn on specific dangerous plugins (1 or 2) run with safe checks turned off to allow specific ones to run. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Renaud Deraison Sent: Monday, March 21, 2005 7:51 AM To: [email protected] Subject: Re: Safe checks vs Disable dangerous plugins On Mon, Mar 21, 2005 at 08:47:01AM -0500, goz ila wrote: > When I enable all plugins, enable "Safe checks" and starts a scan (to be sure > all options get saved), then I interrupt it, close nessus gui and I open the > file .nessusrc. There I have "safe_checks = yes", and all plugins are there > with a "= yes" after every single one. For me it looks like they are all > enabled. I controled for one of them that is of level Attack_destructive, and > it's indeed present and to the value yes. The filtering is done on the nessusd side. Look at nessus-core/nessusd/attack.c : if(preferences_safe_checks_enabled(preferences) && (category == ACT_DESTRUCTIVE_ATTACK || category == ACT_KILL_HOST || category == ACT_FLOOD || category == ACT_DENIAL)) Have a good week, -- Renaud _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
