Andrew Blevins <[EMAIL PROTECTED]> writes: > How hard is it to get a new plugin written for a documented vuln?
Not very hard. Just start from a similar plugin and modify it. > Case in point: Port 2301 is almost always Compaq Insight Manager [snip] > Retina picks this one up, but not nessus (although it does see the open > port). Note that some scanner just test if the standard port is open, other really on banners. If it can, Nessus really tests the vulnerability.
