Questions tagged [nessus]

Nessus is a vulnerability scanning program. Its goal is to detect potential vulnerabilities on the tested systems.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

Trouble figuring out how to configure Nessus Scanner version 10.x to use two way TLS to scan Database

I have a MySQL 5.7 database that requires two-way SSL/TLS for any clients attempting to connect to it. I have the requisite keys and certs for the connection, however I do not know how to configure ...
-1 votes
0 answers
12 views

Request for assistance in configuring Nessus to use TLS certificates for authenticated scans

I am using Nessus 10 in an attempt to scan(authenticated) a Google Computing Platform Managed MySQL 5.7 instance. If I wanted to simply connect to the database remotely I would use the following ...
0 votes
0 answers
12 views

Tools or processes to review security questions

I'm looking for a tool or process to review external customer questions or scans against our internal database of security issues stored in Azure DevOps/TFS or Loopio. We get customer scans using ...
  • 1
-1 votes
1 answer
30 views

Scan internal network from cloud system?

I have an internal network with bunch of devices and there is firewall at entry point from internet. Is it possible to scan that entire internal network from the cloud server where I have tool (for ...
  • 3
1 vote
0 answers
1k views

How to do a compliance scan on VMWare using Nessus on site

I have nessus professional 8.14.0 installed on a server, which is attached to the network, 3 esxi 6.7 hosts and 1 vcenter servers. Nessus Server (192.168.1.21) vCenter Server (192.168.1.9) ESXi Host 1 ...
0 votes
0 answers
23 views

Access Nessus administrative portal from another computer

I just installed Nessus on a SIEM server running Debian and after the installation I was shown the adress for the admin portal and it was https://servername:8836/ The problem is that I cannot reach ...
0 votes
0 answers
2k views

Vulnerability scanning in an authentication policy silo environment

As per best practices, we: Use Active Directory's Authentication Policy Silos and Authentication Policies to restrict administrative user accounts to their respective class of computers so that ...
0 votes
0 answers
3k views

Tenable Nessus and SecurityCenter installlation/configuration issues

I've installed Nessus and SecurityCenter on a RedHat 7.5 instance by following the user guide from Tenable. I'm able to get to the Nessus interface which is served on port 8834, create the admin ...
0 votes
2 answers
6k views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
2 votes
1 answer
973 views

NetBIOS Name Service requests not being sent or answered

I have serious inconsistency on my systems of whether NetBIOS name service requests are working on endpoints. I'm testing with Win7 and Server 2008R2 systems. We do not have a WINS server and don't ...
  • 121
0 votes
1 answer
770 views

MS14-066 Vulnerability (Windows Server 2012 R2) Nessus Scan

I've been trying relentlessly looking for the correct update for the MS14-066 critical (Vulnerability in Schannel) update and every time I download a different patch/version to the server, it says "it'...
  • 1
4 votes
3 answers
10k views

how to set permissions on a service

A Nessus plugin 44676 audit scan revealed this issue: "SMB Insecurely Configured Service" Description At least one insecurely configured Windows service was detected on the remote host. Unprivileged ...
  • 393
3 votes
2 answers
11k views

Painfully slow Nessus initialization

I have Nessus 5 installed under KaLi. Whenever I start Nessus (i.e. nessusd), then it takes like half an hour to initialize. Is there anything one can do to speed up this process?
-1 votes
1 answer
313 views

Check my own servers for vulnerabilities [closed]

We are a small early stage startup with not so much money to spend. We have less than 3 servers that we want to monitor for security issues. Our website is essentially on one server having: Ubuntu ...
1 vote
1 answer
1k views

HP iLO 4 & OpenSSL 'ChangeCipherSpec' MiTM Vulnerability

The Nessus scanner is flagging 'High risk with sig 74326' after the latest rule updates to all HP iLO cards. This is specifically about the OpenSSL 'ChangeCipherSpec' MiTM Vulnerability. It appears ...
  • 113
4 votes
3 answers
1k views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
  • 209
1 vote
2 answers
4k views

How to scan printers on Nessus?

When I try to scan a printer with Nessus 4.4.1 I got the following message: Do not scan printers The remote host appears to be a fragile device and will not be scanned. How can I enable printers ...
  • 123
-1 votes
1 answer
74 views

Nessus HTML5 version 5.0.3 - PCI Scan [closed]

I've been searching for a couple days (and even contacted their support) to find out if Nessus (company is Tenable) has a bundle that scans for PCI compliance. The one that they gave me is the same as ...
0 votes
2 answers
9k views

Nessus Security Vulnability Fix: SSL Version 2 (v2) Protocol Detection

Below, in quotes, is a medium severity issue discovered after scanning an IIS web server, with a tool called Nessus. "Consult the application's documentation to disable SSL 2.0 and use SSL 3.0, TLS ...
  • 1,924
-4 votes
2 answers
1k views

Crack http basic auth password from Linux [closed]

I have a network camera, where the default password does not work. It is probably something simple though, so I though I should try a stock password breaker. What should I use to try to crack my ...
  • 443
1 vote
2 answers
13k views

How to fix "TCP/IP Sequence Prediction Blind Reset Spoofing DoS"

Just finished a Nessus scan and the only thing that came back was "TCP/IP Sequence Prediction Blind Reset Spoofing DoS" - It may be possible to send spoofed RST packets to the remote system. ...
  • 1,265
1 vote
1 answer
11k views

PCI scan failure for SSL Certificate with Wrong Hostname?

A client had a PCI scan completed by SecurityMetrics, and it now says they failed due to the SSL certificate for the SMTP port 25 (and POP3s/IMAPS) not matching the domain scanned. Specifically: ...
1 vote
1 answer
625 views

openVAS scan against new instance fails test (possible false positive) How to debug plug-in

I have openVAS installed from the atomic corp YUM repo, and it all seems to be functioning wonderfully, however I am seeing a single "Security Hole" which is that OpenVAS detects that "arora" is ...
  • 11.1k
2 votes
2 answers
3k views

Using Credentials with network scanners

I'm testing out both Tenable's Nessus scanner as well as eEye's Retina for scanning network devices. I am trying to supply credentials to get deeper, more accurate results, however there seems to be ...
  • 121