Mailing List Archive

SCANNER_SET and gui "Port Scanner" list inconsistent
Hi,

I presume SCANNER_SET in .nessusrc is supposed to correspond to
the Port Scanner list on the Scan Options tab of the GUI client?

I've noticed a few differences - The file is generated as follows
(preferences.c):

fprintf(f, "begin(SCANNER_SET)\n");
fprintf(f, "10180 = yes\n");
fprintf(f, "10278 = no\n");
fprintf(f, "10331 = no\n");
fprintf(f, "10335 = yes\n");
fprintf(f, "10841 = no\n");
fprintf(f, "10336 = no\n");
fprintf(f, "10796 = no\n");
fprintf(f, "11219 = no\n");
fprintf(f, "14259 = no\n");
fprintf(f, "14272 = no\n");
fprintf(f, "14274 = no\n");
fprintf(f, "14663 = no\n");
fprintf(f, "end(SCANNER_SET)\n\n");

10278 is Sendmail_ident.nasl and is duplicated in the PLUGIN_SET
section. If you enable all plugins in the GUI client, it's turned
on in SCANNER_SET and turned off in PLUGIN_SET. In this case it's
the only plugin turned off in a list of 9000. This doesn't seem
right, I would suggest to remove it from SCANNER_SET unless there
is some reason it's in that section.

Also, 10331, 10841, 10336, 14274, 14663 are written to the rc but
not listed in the GUI list.

Of these, 10331 and 10841 are not included with the current plugins
package at all, 10336 is the deprecated nmap wrapper written in C,
14274 is snmpwalk_portscan.nasl and 14663 is amap.nasl.

11840, "Exclude toplevel domain wildcard" is present in the GUI but
not written to the RC when it's generated.

It would be nice if the GUI as well as the RC file generation were
updated to be consistent and if deprecated plugins were removed.

Maybe this could be rolled in with the fixes for doubled plugin
prefs in 2.2.6...

Some GUI buttons to save/load the current plugin selection and options
to/from a config file would be nice too. It's a bit inconvenient that
the only way to save different sets of configs is to change the options,
start a scan and then copying the .nessusrc file manually...


--
Hubert Seiwert

Internet Security Specialist, Westpoint Ltd
Albion Wharf, 19 Albion Street, Manchester M1 5LN, United Kingdom

Web: www.westpoint.ltd.uk
Tel: +44-161-2371028