How to download Nessus agent using wget using license accept option in Amazon...
I want to download Nessus agent from the Nessus downloads page. But I am unable to directly download due to the License Agreement option in Nessus pageBelow command only partly downloaded the filewget...
View ArticleChanging default Apache version on Mac OS
A security sweep of my network (using Nessus) revealed that my mac is running a version of Apache (2.4.46) with a few critical vulnerabilities. I've been told I need to upgrade to at least 2.4.47. I'm...
View ArticleDownloading custom Nessus scan report using Nessus API
I have python code that successfully downloads a Nessus scan report in csv format, but I need to add some additional fields to the downloaded report. I include parameters in the request payload to...
View Articlejackrabbit webdav disable?
recently my jackrabbit(2.8.0) has been scanned by nessue with 2 issueone is some jsp page has clickjacking (please seejackrabbit webdav use HTTP)and the other is use http instead of https (please see...
View ArticleCan I make a Call with NASL to run a C++ programm?
We are working on a project with Nessus Attack Scripting Language ( NASL ) and we would like to run a programm written in C++. I want to ask, is it even possible to run another Script with NASL?So we...
View ArticleRepeat a Python Function - execute the same number of times as entries in a list
Recently I found a python module for one of our COTS products (Tenable) here at the office. It was developed to help access the product's API. I have it installed in my lab here alongside Python 3.9.10...
View ArticleApache vulnerabilities not detected?
I am scanning some servers with Nessus and there is something I do not understand.Nessus detect that the web server is Apache/2.2.16 (on Debian). If yo go to...
View ArticleUsing powershell to re-link Tenable Nessus Agent
I have several, systems (MS OS) that have the Tenable Nessus agent installed in my environment. I am attempting to re-link the agent to the management portal via PowerShell. I will be using SCCM to...
View ArticleHow to Write data directly to mounted volume in linux?
I have an application running in the / system of a cloud vm. (dev/sda)I can't resize the root "/ "partition to extend the storage size and the application does not have an option to write the reports...
View ArticlePowershell Script - Merge Multiple Nessus Scans -
So I am attempting to automate the process of merging multiple Nessus scans, following the manual guide defined at Ryker Exum. The challenge I'm having is the part where I have to find and delete lines...
View Article--- Article Not Found! ---
*** *** *** RSSing Note: Article is missing! We don't know where we put it!!. *** ***
View Article--- Article Not Found! ---
*** *** *** RSSing Note: Article is missing! We don't know where we put it!!. *** ***
View Article--- Article Not Found! ---
*** *** *** RSSing Note: Article is missing! We don't know where we put it!!. *** ***
View Article--- Article Not Found! ---
*** *** *** RSSing Note: Article is missing! We don't know where we put it!!. *** ***
View Article--- Article Not Found! ---
*** *** *** RSSing Note: Article is missing! We don't know where we put it!!. *** ***
View ArticleClik here to view.
PowerShell: Working with the error from Standard Out (using Nessus Essentials)
Trying to use PowerShell to capture the running status of the "Nessus Essentials" software product. Simply trying to capture product status: running, not running, or other. Getting the below error each...
View ArticlePowershell Foreach loop to return ID data
I am currently trying to create a foreach loop to take each value from a list and search for it in return data from an API. For some reason I am getting NULL data when I try to loop it.$agentList =...
View ArticleGetting this error: curl: (3) Host name ' --url' contains bad letter
I am trying to run this line on a linux machine:curl --request GET \ --url 'https://www.tenable.com/downloads/api/v2/pages/nessus/files/Nessus-10.4.2-ubuntu1404_amd64.deb' \ --output 'nessus.deb'but I...
View ArticleNessus RESTful API - Java Problems implementing POST
Im currently tasked to do automation for Nessus.While almost everything works fine, im biting on rock working with this call (from API-DOCU):RequestHTTP RequestPOST...
View ArticleTenable API with JSON request object Integration error
I'm having this error when running the following code(it's not full).The error is the following and I couldn't get past it so far:org.json.JSONException: A JSONArray text must start with '[' at 1...
View ArticleDocker not detected by Tenable Nessus Expert in Mac OS
I have installed Tenable Nessus Expert (Trial version) in my Mac laptop. When I tried to enable Web Application Scanning (WAS) in the UI, it is not able to download WAS package because it cannot detect...
View ArticleAnsible: `uri` module with parameter `body_format: json` reports `HTTP Error...
Im having some trouble with Ansible uri module when pulling JSON from a specific web site.Ansible Code - name: check for Tenable Agent updates. uri: url:...
View ArticleRunning nessu on Ubuntu on WSL2
I am unable to start nessus in WSL using:/bin/systemctl start nessusd.serviceI get the following error:System has not been booted with systemd as init system (PID 1). Can't operate.Failed to connect to...
View ArticleIs libwebp 0.3.0-3 used by pillow on Centos 7 concerned by CVE-2020-36328?
We scanned the same host (a CentOS Linux release 7.6.1810 (Core)) with two vulnerability scanners (Nessus and Rapid7).Rapid7 reported that libwebp-0:0.3.0-7.el7.x86_64 is vulnerable...
View ArticleNessus scanner /bin/sh -c 'printf "command_start_%s""RandomALPHANUM"; netstat...
This is a Nessus scanner commandI wan't to know what the Random Alphanum means, is it an encoded timestamp? or is it just a random alphanumeric for some Nessus function?/bin/sh -c 'printf...
View ArticleHow to provide nessus agent download url in runcommand
Instead of hardcoding the url in the runcommand for nessus agent installation since the verison keeps changing over the time. I want to execute the ssm automation runcommand as a part of an automation...
View ArticleCannot run Nessus service with docker compose?
I am using docker compose file to create an container Nessus with bind mount. It's work successfully with every folder in container exept /opt. (mount folder still work successfully but can't run the...
View ArticleAnsible win_package stuck forever
I am using win_package module for installing "Nessus" in Windows 2016 server. But whenever I execute it, it hangs forever without response. Even after waiting for an hour, there is no response. I have...
View ArticlePytenable sc scans.details(scan_id) status field is showing "0"
I am able to successfully run a scan from the pytenable.sc API but every time I try to pull the details the scan status is 0. I login to the web console very the scan is completed and was successful...
View ArticleHow to export Windows Service Paths prone to unquoted Service Path...
I'm looking for an elegant way to search for windows service Paths not encapsulated in quotes (nessus 63155). The reasoning behind this is to inspect some server for vulnerability to Microsoft Windows...
View Article