Questions tagged [nessus]

Nessus is a vulnerability scanning program. Its goal is to detect potential vulnerabilities on the tested systems.

Filter by
Sorted by
Tagged with
0 votes
0 answers
35 views

Trouble figuring out how to configure Nessus Scanner version 10.x to use two way TLS to scan Database

I have a MySQL 5.7 database that requires two-way SSL/TLS for any clients attempting to connect to it. I have the requisite keys and certs for the connection, however I do not know how to configure ...
The Apple Kid's user avatar
0 votes
0 answers
14 views

Tools or processes to review security questions

I'm looking for a tool or process to review external customer questions or scans against our internal database of security issues stored in Azure DevOps/TFS or Loopio. We get customer scans using ...
user avatar
-1 votes
1 answer
35 views

Scan internal network from cloud system?

I have an internal network with bunch of devices and there is firewall at entry point from internet. Is it possible to scan that entire internal network from the cloud server where I have tool (for ...
raal's user avatar
  • 3
1 vote
0 answers
2k views

How to do a compliance scan on VMWare using Nessus on site

I have nessus professional 8.14.0 installed on a server, which is attached to the network, 3 esxi 6.7 hosts and 1 vcenter servers. Nessus Server (192.168.1.21) vCenter Server (192.168.1.9) ESXi Host 1 ...
James Connigan's user avatar
0 votes
0 answers
29 views

Access Nessus administrative portal from another computer

I just installed Nessus on a SIEM server running Debian and after the installation I was shown the adress for the admin portal and it was https://servername:8836/ The problem is that I cannot reach ...
generalissimo's user avatar
0 votes
0 answers
4k views

Tenable Nessus and SecurityCenter installlation/configuration issues

I've installed Nessus and SecurityCenter on a RedHat 7.5 instance by following the user guide from Tenable. I'm able to get to the Nessus interface which is served on port 8834, create the admin ...
WallyBallooba's user avatar
0 votes
2 answers
7k views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
Eric Gibson's user avatar
3 votes
1 answer
1k views

NetBIOS Name Service requests not being sent or answered

I have serious inconsistency on my systems of whether NetBIOS name service requests are working on endpoints. I'm testing with Win7 and Server 2008R2 systems. We do not have a WINS server and don't ...
S'pht'Kr's user avatar
  • 131
0 votes
1 answer
777 views

MS14-066 Vulnerability (Windows Server 2012 R2) Nessus Scan

I've been trying relentlessly looking for the correct update for the MS14-066 critical (Vulnerability in Schannel) update and every time I download a different patch/version to the server, it says "it'...
C Hill's user avatar
  • 1
4 votes
3 answers
11k views

how to set permissions on a service

A Nessus plugin 44676 audit scan revealed this issue: "SMB Insecurely Configured Service" Description At least one insecurely configured Windows service was detected on the remote host. Unprivileged ...
Roman's user avatar
  • 405
3 votes
2 answers
11k views

Painfully slow Nessus initialization

I have Nessus 5 installed under KaLi. Whenever I start Nessus (i.e. nessusd), then it takes like half an hour to initialize. Is there anything one can do to speed up this process?
countermode's user avatar
-1 votes
1 answer
322 views

Check my own servers for vulnerabilities [closed]

We are a small early stage startup with not so much money to spend. We have less than 3 servers that we want to monitor for security issues. Our website is essentially on one server having: Ubuntu ...
Sebastien Lorber's user avatar
1 vote
1 answer
1k views

HP iLO 4 & OpenSSL 'ChangeCipherSpec' MiTM Vulnerability

The Nessus scanner is flagging 'High risk with sig 74326' after the latest rule updates to all HP iLO cards. This is specifically about the OpenSSL 'ChangeCipherSpec' MiTM Vulnerability. It appears ...
pablo808's user avatar
  • 113
4 votes
3 answers
1k views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
appsecguy's user avatar
  • 209
1 vote
2 answers
4k views

How to scan printers on Nessus?

When I try to scan a printer with Nessus 4.4.1 I got the following message: Do not scan printers The remote host appears to be a fragile device and will not be scanned. How can I enable printers ...
vs06's user avatar
  • 123
-1 votes
1 answer
75 views

Nessus HTML5 version 5.0.3 - PCI Scan [closed]

I've been searching for a couple days (and even contacted their support) to find out if Nessus (company is Tenable) has a bundle that scans for PCI compliance. The one that they gave me is the same as ...
lbakerit's user avatar
1 vote
2 answers
10k views

Nessus Security Vulnability Fix: SSL Version 2 (v2) Protocol Detection

Below, in quotes, is a medium severity issue discovered after scanning an IIS web server, with a tool called Nessus. "Consult the application's documentation to disable SSL 2.0 and use SSL 3.0, TLS ...
JustBeingHelpful's user avatar
-4 votes
2 answers
1k views

Crack http basic auth password from Linux [closed]

I have a network camera, where the default password does not work. It is probably something simple though, so I though I should try a stock password breaker. What should I use to try to crack my ...
Gurgeh's user avatar
  • 463
1 vote
2 answers
13k views

How to fix "TCP/IP Sequence Prediction Blind Reset Spoofing DoS"

Just finished a Nessus scan and the only thing that came back was "TCP/IP Sequence Prediction Blind Reset Spoofing DoS" - It may be possible to send spoofed RST packets to the remote system. ...
Kladskull's user avatar
  • 1,265
1 vote
1 answer
12k views

PCI scan failure for SSL Certificate with Wrong Hostname?

A client had a PCI scan completed by SecurityMetrics, and it now says they failed due to the SSL certificate for the SMTP port 25 (and POP3s/IMAPS) not matching the domain scanned. Specifically: ...
Rob Mangiafico's user avatar
1 vote
1 answer
635 views

openVAS scan against new instance fails test (possible false positive) How to debug plug-in

I have openVAS installed from the atomic corp YUM repo, and it all seems to be functioning wonderfully, however I am seeing a single "Security Hole" which is that OpenVAS detects that "arora" is ...
Tom's user avatar
  • 11.2k
2 votes
2 answers
3k views

Using Credentials with network scanners

I'm testing out both Tenable's Nessus scanner as well as eEye's Retina for scanning network devices. I am trying to supply credentials to get deeper, more accurate results, however there seems to be ...
grossmae's user avatar
  • 121