Abstract

Some of the more advanced functions that Nessus' include files provide allow a user to write more than just banner comparison or service-detection tests; they also allow users to easily utilize Windows' internal functions to determine whether a certain Windows service pack or hotfix has been installed on a remote machine or whether a certain UNIX patch has been installed. Nessus can connect to a remote Windows machine by utilizing Microsoft's Server Message Block (SMB) protocol. Once SMB connectivity has been established, many types of functionality can be implemented, including the ability to query the remote host's service list, connect to file shares and open files that reside under it, access the remote host's registry, and determine user and group lists. This chapter discusses Nessus' include files implementation of the SMB protocol, followed by Nessus' include files implementation of Windows-related hotfix and service pack verification. The chapter also addresses how a similar kind of hotfix and service pack verification can be done for different UNIX flavors by utilizing relevant include files.

Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call