Questions tagged [nessus]
Nessus is a vulnerability scanning program. Its goal is to detect potential vulnerabilities on the tested systems.
24
questions
0
votes
0
answers
7
views
Trouble figuring out how to configure Nessus Scanner version 10.x to use two way TLS to scan Database
I have a MySQL 5.7 database that requires two-way SSL/TLS for any clients attempting to connect to it. I have the requisite keys and certs for the connection, however I do not know how to configure ...
-1
votes
0
answers
12
views
Request for assistance in configuring Nessus to use TLS certificates for authenticated scans
I am using Nessus 10 in an attempt to scan(authenticated) a Google Computing Platform Managed MySQL 5.7 instance.
If I wanted to simply connect to the database remotely I would use the following ...
0
votes
0
answers
12
views
Tools or processes to review security questions
I'm looking for a tool or process to review external customer questions or scans against our internal database of security issues stored in Azure DevOps/TFS or Loopio. We get customer scans using ...
- 1
-1
votes
1
answer
30
views
Scan internal network from cloud system?
I have an internal network with bunch of devices and there is firewall at entry point from internet.
Is it possible to scan that entire internal network from the cloud server where I have tool (for ...
- 3
1
vote
0
answers
1k
views
How to do a compliance scan on VMWare using Nessus on site
I have nessus professional 8.14.0 installed on a server, which is attached to the network, 3 esxi 6.7 hosts and 1 vcenter servers.
Nessus Server (192.168.1.21)
vCenter Server (192.168.1.9)
ESXi Host 1 ...
- 137
0
votes
0
answers
23
views
Access Nessus administrative portal from another computer
I just installed Nessus on a SIEM server running Debian and after the installation I was shown the adress for the admin portal and it was https://servername:8836/
The problem is that I cannot reach ...
0
votes
0
answers
2k
views
Vulnerability scanning in an authentication policy silo environment
As per best practices, we:
Use Active Directory's Authentication Policy Silos and Authentication Policies to restrict administrative user accounts to their respective class of computers so that ...
- 895
0
votes
0
answers
3k
views
Tenable Nessus and SecurityCenter installlation/configuration issues
I've installed Nessus and SecurityCenter on a RedHat 7.5 instance by following the user guide from Tenable. I'm able to get to the Nessus interface which is served on port 8834, create the admin ...
0
votes
2
answers
6k
views
SSL Self-Signed Certificate Vulnerability Keeps Returning
So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
- 93
2
votes
1
answer
973
views
NetBIOS Name Service requests not being sent or answered
I have serious inconsistency on my systems of whether NetBIOS name service requests are working on endpoints. I'm testing with Win7 and Server 2008R2 systems. We do not have a WINS server and don't ...
- 121
0
votes
1
answer
770
views
MS14-066 Vulnerability (Windows Server 2012 R2) Nessus Scan
I've been trying relentlessly looking for the correct update for the MS14-066 critical (Vulnerability in Schannel) update and every time I download a different patch/version to the server, it says "it'...
- 1
4
votes
3
answers
10k
views
how to set permissions on a service
A Nessus plugin 44676 audit scan revealed this issue:
"SMB Insecurely Configured Service"
Description
At least one insecurely configured Windows service was detected on the remote host. Unprivileged ...
- 393
3
votes
2
answers
11k
views
Painfully slow Nessus initialization
I have Nessus 5 installed under KaLi. Whenever I start Nessus (i.e. nessusd), then it takes like half an hour to initialize. Is there anything one can do to speed up this process?
- 395
-1
votes
1
answer
313
views
Check my own servers for vulnerabilities [closed]
We are a small early stage startup with not so much money to spend.
We have less than 3 servers that we want to monitor for security issues.
Our website is essentially on one server having:
Ubuntu
...
1
vote
1
answer
1k
views
HP iLO 4 & OpenSSL 'ChangeCipherSpec' MiTM Vulnerability
The Nessus scanner is flagging 'High risk with sig 74326' after the latest rule updates to all HP iLO cards.
This is specifically about the OpenSSL 'ChangeCipherSpec' MiTM Vulnerability.
It appears ...
- 113
4
votes
3
answers
1k
views
How should privileged accounts be secured in both Linux and Windows?
I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
- 209
1
vote
2
answers
4k
views
How to scan printers on Nessus?
When I try to scan a printer with Nessus 4.4.1 I got the following message:
Do not scan printers The remote host appears to be a fragile device
and will not be scanned.
How can I enable printers ...
- 123
-1
votes
1
answer
74
views
Nessus HTML5 version 5.0.3 - PCI Scan [closed]
I've been searching for a couple days (and even contacted their support) to find out if Nessus (company is Tenable) has a bundle that scans for PCI compliance. The one that they gave me is the same as ...
- 3
0
votes
2
answers
9k
views
Nessus Security Vulnability Fix: SSL Version 2 (v2) Protocol Detection
Below, in quotes, is a medium severity issue discovered after scanning an IIS web server, with a tool called Nessus.
"Consult the application's documentation to disable SSL 2.0 and use
SSL 3.0, TLS ...
- 1,924
-4
votes
2
answers
1k
views
Crack http basic auth password from Linux [closed]
I have a network camera, where the default password does not work. It is probably something simple though, so I though I should try a stock password breaker. What should I use to try to crack my ...
- 443
1
vote
2
answers
13k
views
How to fix "TCP/IP Sequence Prediction Blind Reset Spoofing DoS"
Just finished a Nessus scan and the only thing that came back was "TCP/IP Sequence Prediction Blind Reset Spoofing DoS" - It may be possible to send spoofed RST packets to the remote system.
...
- 1,265
1
vote
1
answer
11k
views
PCI scan failure for SSL Certificate with Wrong Hostname?
A client had a PCI scan completed by SecurityMetrics, and it now says they failed due to the SSL certificate for the SMTP port 25 (and POP3s/IMAPS) not matching the domain scanned. Specifically:
...
- 151
1
vote
1
answer
625
views
openVAS scan against new instance fails test (possible false positive) How to debug plug-in
I have openVAS installed from the atomic corp YUM repo, and it all seems to be functioning wonderfully, however I am seeing a single "Security Hole" which is that OpenVAS detects that "arora" is ...
- 11.1k
2
votes
2
answers
3k
views
Using Credentials with network scanners
I'm testing out both Tenable's Nessus scanner as well as eEye's Retina for scanning network devices. I am trying to supply credentials to get deeper, more accurate results, however there seems to be ...
- 121