Mailing List Archive

Trying to upload a custom plugin
I'm trying to upload a plugin into Nessus but can't seem to get it to
show up in the available plugins list. I've tried through the Nessus
Console interface using the "Upload Plugin" option and tried manually
copying the it into the plugins directory and restarted the service to
no avail. I've also double checked that the server is set to accept
uploaded plugins. Am I missing something?



Thanks

Ryan
Re: Trying to upload a custom plugin [ In reply to ]
Did you use all options like script_id, description etc.
Nessus need those.

The script_id have to bee unique.
When does nessusd.messages look like, any errors reported there,

if you start nessus like this (> 3.x) /opt/nessus/sbin/nessusd -D
does it shows some errors

-- Ferdy

Ryan Petti wrote:
> I’m trying to upload a plugin into Nessus but can’t seem to get it to
> show up in the available plugins list. I’ve tried through the Nessus
> Console interface using the “Upload Plugin” option and tried manually
> copying the it into the plugins directory and restarted the service to
> no avail. I’ve also double checked that the server is set to accept
> uploaded plugins. Am I missing something?
>
>
>
> Thanks
>
> Ryan
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Plugins-writers mailing list
> Plugins-writers@list.nessus.org
> http://mail.nessus.org/mailman/listinfo/plugins-writers
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers
RE: Trying to upload a custom plugin [ In reply to ]
Yes, all of the necessary fields are there.

Starting nessus with -D shows nothing out of the ordinary.

Nessusd.messages displays "saving in /dev/null" once when I try to load
the plugin with the "Upload plugin option"

I also tried copying my plugin into an existing plugin file with the
same name and copied that new file (with the old plugin name) into the
plugin directory. Now I'm getting "Inconsistant data: Check for host
firewall [which is the name of the plugin I wrote] - not applying this
plugin.

Before I hijacked the existing plugin and uploaded my file separately,
it would display no messages and just not load the plugin.

The text for my plugin is below:

## Begin plugin

if (description)
{
script_id(99980);
script_version ("1.0");
name["english"] = "Check for host firewall";

script_name(english:name["english"]);

desc["english"]="
Your host does not comply with ABCompany's published
security policy and will not be admitted to the
network.

To resolve this issue, either enable a personal
firewall on your host or contact the Helpdesk at
555-1212.

Risk factor: High";

script_description(english:desc["english"]);

summary["english"] = "Determine if a host firewall is running";
script_summary(summary["english"]);

script_category(ACT_GATHER_INFO);
family["english"] = "Firewalls";
script_family(family["english"]);

exit(0);
}

if (islocalhost())
exit(0);

saddr = this_host();
daddr = get_host_ip();
sport = 1234;
dport = 55999;

pcap_filter = strcat('src port ', dport, ' and src host ', daddr,
' and dst port ', sport, ' and dst host ',
saddr);

ip = forge_ip_packet(ip_p:IPPROTO_TCP,
ip_src:saddr);

tcp = forge_tcp_packet(ip:ip,
th_sport:sport,
th_dport:dport,
th_flags:TH_SYN,
th_seq:rand(),
th_ack:0,
th_win:512);

# XXX maybe use tcp_ping()?

for (i = 0;i < 3;i++)
{
reply = send_packet(pcap_active:TRUE, pcap_filter:filter,
pcap_timeout:2, tcp);
if (reply)
{
flags = get_tcp_element(tcp:reply, element:"th_flags");
if (((flags & TH_SYN) && (flags & TH_ACK)) ||
flags & TH_RST)
{
security_hole(port:dport);
exit(0);
} # XXX else?
}
}

## end plugin

-----Original Message-----
From: plugins-writers-bounces@list.nessus.org
[mailto:plugins-writers-bounces@list.nessus.org] On Behalf Of Ferdy
Riphagen
Sent: Monday, June 12, 2006 12:48 PM
To: plugins-writers@list.nessus.org
Subject: Re: [Plugins-writers] Trying to upload a custom plugin

Did you use all options like script_id, description etc.
Nessus need those.

The script_id have to bee unique.
When does nessusd.messages look like, any errors reported there,

if you start nessus like this (> 3.x) /opt/nessus/sbin/nessusd -D
does it shows some errors

-- Ferdy

Ryan Petti wrote:
> I'm trying to upload a plugin into Nessus but can't seem to get it to
> show up in the available plugins list. I've tried through the Nessus
> Console interface using the "Upload Plugin" option and tried manually
> copying the it into the plugins directory and restarted the service to
> no avail. I've also double checked that the server is set to accept
> uploaded plugins. Am I missing something?
>
>
>
> Thanks
>
> Ryan
>
>
>
------------------------------------------------------------------------
>
> _______________________________________________
> Plugins-writers mailing list
> Plugins-writers@list.nessus.org
> http://mail.nessus.org/mailman/listinfo/plugins-writers
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers
Re: Trying to upload a custom plugin [ In reply to ]
On Mon, Jun 12, 2006 at 02:37:44PM -0400, Ryan Petti wrote:

> Now I'm getting "Inconsistant data: Check for host
> firewall [which is the name of the plugin I wrote] - not applying this
> plugin.

Ah, now there's a clue -- this tells us that your script is missing
either its description, name, copyright, or summary.

> The text for my plugin is below:

Add a copyright and nessusd will at least load it.


George
--
theall@tenablesecurity.com
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers