On Sat, 19 Jul 2008 14:03:48 +0000
MALTE SIMON <[EMAIL PROTECTED]> wrote:
> Hello, is ther a way to stop Nessus if a Host have more then 500 open
> Ports?
Write an ACT_GATHER_INFORMATION plugin which will declare the host dead if such
thing happens.
Something like:
# Insert description...
ports = get_kb_list("Ports/tcp/*");
if (! isnull(ports) && max_index(ports) > 500)
{
security_warning(port: 0, extra: max_index(ports), ' TCP ports are open\n');
set_kb_item(name:"Host/dead", value:TRUE);
}
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus