On Thu, Jan 22, 2004 at 10:30:19PM -0500, Jim Hendrick wrote:
> I personally would voice my opinion against any plugin that intentionally
> sends *ANY* signal to a known virus/backdoor. 

The very definition of a scanner is to send signal to the remote
services. How is sending "43ffffff0000000004120" more dangerous than
sending "GET / HTTP/1.0" ? If a "blackhat" infected the remote host and
decided to do something bad with it, he could wait for any of the Nessus
probe to come in.



                                -- Renaud

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to