Questions tagged [nessus]

Nessus is a vulnerability scanning program. Its goal is to detect potential vulnerabilities on the tested systems.

Filter by
Sorted by
Tagged with
0 votes
0 answers
28 views

How do i nessus scan to the EC2 server which is behind load balancer

I have a EC2 server which is running behind a load balancer. Load balancer URL has been mapped as A record in route53. Audit team is asking for the public ip address. How do i give them? ALB URL even ...
4 votes
3 answers
1k views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
3 votes
1 answer
1k views

NetBIOS Name Service requests not being sent or answered

I have serious inconsistency on my systems of whether NetBIOS name service requests are working on endpoints. I'm testing with Win7 and Server 2008R2 systems. We do not have a WINS server and don't ...
-1 votes
1 answer
42 views

Scan internal network from cloud system?

I have an internal network with bunch of devices and there is firewall at entry point from internet. Is it possible to scan that entire internal network from the cloud server where I have tool (for ...
1 vote
0 answers
2k views

How to do a compliance scan on VMWare using Nessus on site

I have nessus professional 8.14.0 installed on a server, which is attached to the network, 3 esxi 6.7 hosts and 1 vcenter servers. Nessus Server (192.168.1.21) vCenter Server (192.168.1.9) ESXi Host 1 ...
0 votes
0 answers
35 views

Access Nessus administrative portal from another computer

I just installed Nessus on a SIEM server running Debian and after the installation I was shown the adress for the admin portal and it was https://servername:8836/ The problem is that I cannot reach ...
4 votes
3 answers
12k views

how to set permissions on a service

A Nessus plugin 44676 audit scan revealed this issue: "SMB Insecurely Configured Service" Description At least one insecurely configured Windows service was detected on the remote host. Unprivileged ...
0 votes
0 answers
4k views

Tenable Nessus and SecurityCenter installlation/configuration issues

I've installed Nessus and SecurityCenter on a RedHat 7.5 instance by following the user guide from Tenable. I'm able to get to the Nessus interface which is served on port 8834, create the admin ...
3 votes
2 answers
11k views

Painfully slow Nessus initialization

I have Nessus 5 installed under KaLi. Whenever I start Nessus (i.e. nessusd), then it takes like half an hour to initialize. Is there anything one can do to speed up this process?
0 votes
2 answers
7k views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
0 votes
1 answer
779 views

MS14-066 Vulnerability (Windows Server 2012 R2) Nessus Scan

I've been trying relentlessly looking for the correct update for the MS14-066 critical (Vulnerability in Schannel) update and every time I download a different patch/version to the server, it says "it'...
1 vote
2 answers
10k views

Nessus Security Vulnability Fix: SSL Version 2 (v2) Protocol Detection

Below, in quotes, is a medium severity issue discovered after scanning an IIS web server, with a tool called Nessus. "Consult the application's documentation to disable SSL 2.0 and use SSL 3.0, TLS ...
1 vote
2 answers
13k views

How to fix "TCP/IP Sequence Prediction Blind Reset Spoofing DoS"

Just finished a Nessus scan and the only thing that came back was "TCP/IP Sequence Prediction Blind Reset Spoofing DoS" - It may be possible to send spoofed RST packets to the remote system. ...
-1 votes
1 answer
323 views

Check my own servers for vulnerabilities [closed]

We are a small early stage startup with not so much money to spend. We have less than 3 servers that we want to monitor for security issues. Our website is essentially on one server having: Ubuntu ...
1 vote
1 answer
1k views

HP iLO 4 & OpenSSL 'ChangeCipherSpec' MiTM Vulnerability

The Nessus scanner is flagging 'High risk with sig 74326' after the latest rule updates to all HP iLO cards. This is specifically about the OpenSSL 'ChangeCipherSpec' MiTM Vulnerability. It appears ...
1 vote
2 answers
4k views

How to scan printers on Nessus?

When I try to scan a printer with Nessus 4.4.1 I got the following message: Do not scan printers The remote host appears to be a fragile device and will not be scanned. How can I enable printers ...
-1 votes
1 answer
75 views

Nessus HTML5 version 5.0.3 - PCI Scan [closed]

I've been searching for a couple days (and even contacted their support) to find out if Nessus (company is Tenable) has a bundle that scans for PCI compliance. The one that they gave me is the same as ...
1 vote
1 answer
12k views

PCI scan failure for SSL Certificate with Wrong Hostname?

A client had a PCI scan completed by SecurityMetrics, and it now says they failed due to the SSL certificate for the SMTP port 25 (and POP3s/IMAPS) not matching the domain scanned. Specifically: ...
-4 votes
2 answers
1k views

Crack http basic auth password from Linux [closed]

I have a network camera, where the default password does not work. It is probably something simple though, so I though I should try a stock password breaker. What should I use to try to crack my ...
2 votes
2 answers
3k views

Using Credentials with network scanners

I'm testing out both Tenable's Nessus scanner as well as eEye's Retina for scanning network devices. I am trying to supply credentials to get deeper, more accurate results, however there seems to be ...
1 vote
1 answer
639 views

openVAS scan against new instance fails test (possible false positive) How to debug plug-in

I have openVAS installed from the atomic corp YUM repo, and it all seems to be functioning wonderfully, however I am seeing a single "Security Hole" which is that OpenVAS detects that "arora" is ...