I changed the scan to only run the SMB share files enumerated plug in.
During the scan I get a popup on the target with the following information
"wmiprvse.exe - Application Error The exception unknown software exception
(0xc0000409) occurred in the
application at location 0x7166710b"
wmiprvse.exe is a part of the Microsoft Windows Operating System and deals with
WMI operations through the WinMgmt.exe process.
snappet for the plugin
script_dependencies("smb_accessible_shares.nasl");
if ( NASL_LEVEL >= 3000 ) script_dependencies("wmi_enum_files.nbin");
script_require_keys("SMB/shares");
script_require_ports(139, 445);
exit(0);
}
If the plugin is going to use SMB to enumerate files, why does it appear to
load wmi_enum_files.nbin? I'm still trying to figure out if wmi_enum_files.nbin
is causing the exception in wimiprvse or if I have a problem with my
workstations.
Take Care --John
-------------- Original message ----------------------
From: [EMAIL PROTECTED]
> The below entries are from the scan.log file. I have several questions
>
> 1. I only selected SMB share files enumerated and SMB share files enumerated
> via WMI to run When I looked at the dependences in the code for SMB shared
> FIle
> enumerated I could not find any references to "realplayer".
> 2. When I searched the plugins\script directory I was able to locate all of
> the
> .nasl files that the log shows as not being found.
>
> [Fri Jul 27 06:55:50 2007][1988] user localuser : testing VAPRINCEGET848
> (10.10.10.158) [1988]
> [Fri Jul 27 06:55:50 2007][1988] realplayer_6011.nasl depends on
> realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_6012.nasl depends on
> realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_6_0_12_1483.nasl depends on
> realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_6_0_12_1578.nasl depends on
> realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_multiple_vulns.nasl depends on
> realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_undisclosed_vulns.nasl depends on
> realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_png_heap_corruption.nasl depends
> on
> realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_skin_remote_overflow.nasl depends
> on
> realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_file_handler_overflow.nasl
> depends
> on realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] smb_accessible_shares_office_files.nasl
> depends
> on smb_enum_files.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] realplayer_realtext_parsing_overflow.nasl
> depends on realplayer_detect.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988]
> smb_accessible_shares_copyrighted_content.nasl
> depends on smb_enum_files.nasl which could not be found
> [Fri Jul 27 06:55:50 2007][1988] Scan 10.10.10.158 using 13 plugins
> [Fri Jul 27 06:57:13 2007][1988] Finished testing 10.10.10.158. Time : 87.145
> secs, 13 plugins launched
> [Fri Jul 27 06:57:13 2007][1988] 1 hosts scanned
>
> Take Care --John
>
> -------------- Original message ----------------------
> From: [EMAIL PROTECTED]
> > Hello everyone, I ran a scan using this two plugins SMB share files
> > enumerated
> > and SMB share files enumerated via WMI to get a feel for how file
> > enumeration
> > works.
> >
> > I ran multiple administrative scans with the targets being WIn2k3 and XP,
> > all
> > the reports came up empty.
> >
> > These plugin enumerates files listed on remote shares. The extensions that
> > it
> > checks for are "mp3"
> > "doc" "txt" "pdf" and so on. and there are files with those extensions on
> > the
> > targets, so I don't understand why I'm getting a empty report, i thought I
> would
> > have seen a list of any file with that extension in my report.
> >
> > Take Care and Have Fun --John
> > _______________________________________________
> > Nessus mailing list
> > [email protected]
> > http://mail.nessus.org/mailman/listinfo/nessus
>
> _______________________________________________
> Nessus mailing list
> [email protected]
> http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
