I am trying to list the value of a couple of Windows registry settings by
writing a NASL plugin for Nessus 3.0.6.1 on Windows XP. I run the custom
script below in the Nessus GUI but only get the following output for that
plugin: "general/tcp Workstation(Enabled)=; Server(Enabled)= Plugin
ID : 99990". It doesn't actually show me the dword registry value (a "1" or a
"0") for some reason.
I have configured Nessus, for the test, to use administrator credentials on the
workstation being scanned, and I also run it with "Windows/SMB Accessible
Registry" and "Windows/Registry cannot be accessed by the scanner" plugins just
to make sure it is not a registry access issue.
Any ideas as to what might be wrong?
Thanks,
Chris Covington
[EMAIL PROTECTED]
### Display SMB Signing Status
if(description)
{
script_id(99990);
script_family("TEST"); # GUI: The plugin family
script_name("9990: Display SMB Signing Status");# GUI: The plugin name
script_summary("Detect SMB Signing"); # GUI: Shown in Plugin Details
- Short
script_description("Solution: n/a; Risk Factor: None");# GUI: Shown in Plugin
Details - Long
script_category(ACT_GATHER_INFO);
script_copyright("");
script_dependencies("netbios_name_get.nasl", "smb_login.nasl",
"smb_registry_access.nasl", "smb_registry_full_access.nasl");
script_require_keys("SMB/name", "SMB/login", "SMB/password", "SMB/transport");
script_exclude_keys("SMB/samba");
script_require_ports(139, 445);
exit(0);
}
### Main Program
include("smb_nt.inc");
note="";
reg =
registry_get_dword(key:"SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters",
item:"enablesecuritysignature");
note += "Workstation(Enabled)=" + reg;
reg =
registry_get_dword(key:"SYSTEM\CurrentControlSet\Services\lanmanserver\parameters",
item:"enablesecuritysignature");
note += "; " + "Server(Enabled)=" + reg;
security_note(data:note);
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
