Re: [Cooker] Cannot use nessus
On Tuesday 20 November 2001 01:07 am, you wrote: So sprach »Sergio Korlowsky« am 2001-11-19 um 17:40:29 -0600 : On Monday 19 November 2001 10:07 am, you wrote: Am Sam, 2001-11-17 um 17.35 schrieb Alexander Skwar: Anyone successfully running nessus? Let me reiterate my question: Anyone successfully using a clean install of nessus-1.1.8-1mdk? Why don't you try installing from: the 'nessus-installer.sh' Because I don't like tarballs and try to avoid them where ever possible. But I'll give it a try. However, did you do a clean rpm install following the steps I laid out? Does nessus work? Alexander Skwar Nop... it did not, the server came up ok, but there were problems between the server and the client to communicate. got an error. sk
Re: [Cooker] Cannot use nessus
Am Sam, 2001-11-17 um 17.35 schrieb Alexander Skwar: Anyone successfully running nessus? Let me reiterate my question: Anyone successfully using a clean install of nessus-1.1.8-1mdk? -- Alexander Skwar -- How to quote: http://learn.to/quote (german) http://quote.6x.to (en) Homepage: http://www.iso-top.de | Jabber: [EMAIL PROTECTED] iso-top.de - Die günstige Art an Linux Distributionen zu kommen Uptime: 2 days 19 hours 57 minutes
Re: [Cooker] Cannot use nessus
On Monday 19 November 2001 10:07 am, you wrote: Am Sam, 2001-11-17 um 17.35 schrieb Alexander Skwar: Anyone successfully running nessus? Let me reiterate my question: Anyone successfully using a clean install of nessus-1.1.8-1mdk? Why don't you try installing from: the 'nessus-installer.sh' its a single file that has everything you need, and compiles right into your own system, all is done automaticly: Check this out! Nessus installation : Ready to install Nessus is now ready to be installed on this host. The installation process will first compile it then install it Press ENTER to continue x - Compiling the libraries x -- Configuring the sources for your system x -- Uninstalling any previous version of Nessus + rm -f /usr/local/lib/libnessus.a /usr/local/lib/libnessus.la /usr/local/lib/libnessus.so /usr/local/lib/libnessus.so.1 /usr/local/lib/libnessus.so.1.0.9 + rm -f /usr/local/lib/libpcap-nessus.a /usr/local/lib/libpcap-nessus.la /usr/local/lib/libpcap-nessus.so /usr/local/lib/libpcap-nessus.so.1 /usr/local/lib/libpcap-nessus.so.1.0.9 + rm -f /usr/local/lib/libpeks.a /usr/local/lib/libpeks.la /usr/local/lib/libpeks.so /usr/local/lib/libpeks.so.0 /usr/local/lib/libpeks.so.0.8.18 + rm -f /usr/local/lib/libhosts_gatherer.a /usr/local/lib/libhosts_gatherer.la /usr/local/lib/libhosts_gatherer.so /usr/local/lib/libhosts_gatherer.so.1 /usr/local/lib/libhosts_gatherer.so.1.0.9 + rm -f /usr/local/lib/libnasl.a /usr/local/lib/libnasl.la /usr/local/lib/libnasl.so /usr/local/lib/libnasl.so.1 /usr/local/lib/libnasl.so.1.0.9 + rm -rf /usr/local/lib/nessus/ + rm -rf /usr/local/include/nessus + rm -rf /usr/local/include/peks + rm -f /usr/local/bin/nessus-config + rm -f /usr/local/bin/nasl-config + rm -f /usr/local/bin/nessus-build + rm -f /usr/local/bin/nessus + rm -f /usr/local/bin/nasl + rm -f /usr/local/sbin/nessusd + rm -f /usr/local/sbin/nessus-adduser + rm -f /usr/local/sbin/nessus-update-plugins + rm -f /usr/local/man/man1/nessus-config.1 + rm -f /usr/local/man/man1/nasl-config.1 + rm -f /usr/local/man/man1/nessus-build.1 + rm -f /usr/local/man/man1/nessus.1 + rm -f /usr/local/man/man1/nasl.1 + rm -f /usr/local/man/man8/nessusd.8 + rm -f /usr/local/man/man8/nessus-adduser.8 + rm -f /usr/local/man/man8/nessus-update-plugins.8 x -- Compiling addmul_1.asm: 220: warning, simulating cmov with jump, use for testing only addmul_1.asm: 221: warning, simulating cmov with jump, use for testing only addmul_1.asm: 220: warning, simulating cmov with jump, use for testing only addmul_1.asm: 221: warning, simulating cmov with jump, use for testing only submul_1.asm: 220: warning, simulating cmov with jump, use for testing only Nessus installation : Finished Congratulations ! Nessus is now installed on this host . To add a nessusd user use /usr/local/sbin/nessus-adduser . To start the Nessus daemon (nessusd) use /usr/local/sbin/nessusd -D . To start the Nessus client (nessus) use /usr/local/bin/nessus . To uninstall Nessus, use /usr/local/sbin/uninstall-nessus . A step by step demo of Nessus is available at : http://www.nessus.org/demo/ Press ENTER to quit [root@sedecomp progs]# /usr/local/sbin/nessus-adduser Generating primes: ...q.pg Using /var/tmp as a temporary file holder Add a new nessusd user -- Login : admin Authentication method (cipher/plaintext) [cipher] : Is admin a local user on this machine [y|n]? l Ok, treating user admin as a local user. User rules -- nessusd has a rules system which allows you to restrict the hosts that admin has the right to test. For instance, you may want him to be able to scan his own host only. Please see the nessus-adduser(8) man page for the rules syntax Enter the rules for this user, and hit ctrl-D once you are done : (the user can have an empty rules set) Login : admin Auth. method : cipher, local user connecting from 127.0.0.1 Rules : Is that ok ? (y/n) [y] y Generating the user key for admin (please be patient) Generating primes: q..pg To protect your private key just generated, enter your personal pass phrase, now. Keep that pass phrase secret. And each time when you restart nessus, re-enter that pass phrase when you are asked, for. This prevents anybody else from logging in to the nessus server using your account. The drawback of a pass phrase is that it will prevent you from being able to use nessus(1) in a cron job or in a quiet script. If you do not want to use a pass phrase, enter
Re: [Cooker] Cannot use nessus
So sprach »Sergio Korlowsky« am 2001-11-19 um 17:40:29 -0600 : On Monday 19 November 2001 10:07 am, you wrote: Am Sam, 2001-11-17 um 17.35 schrieb Alexander Skwar: Anyone successfully running nessus? Let me reiterate my question: Anyone successfully using a clean install of nessus-1.1.8-1mdk? Why don't you try installing from: the 'nessus-installer.sh' Because I don't like tarballs and try to avoid them where ever possible. But I'll give it a try. However, did you do a clean rpm install following the steps I laid out? Does nessus work? Alexander Skwar -- How to quote: http://learn.to/quote (german) http://quote.6x.to (english) Homepage: http://www.iso-top.de | Jabber: [EMAIL PROTECTED] iso-top.de - Die günstige Art an Linux Distributionen zu kommen Uptime: 3 days 10 hours 57 minutes
Re: [Cooker] Cannot use nessus
Am Son, 2001-11-18 um 06.37 schrieb Sergio Korlowsky:
Yes... I always use nessus, and its working ok...
Hmm, strange...
Nessus is the client and nessusd the server, they both can operate on the
same pc.
Yes, I know :) Thanks!
Install nessus, nessus-client and nessus-plugins, then as root (su) create a
user, called whatever you want 'admin' for instance. and start the server
with: nessusd -D
What do I need this admin user for?
The connect with the client as normal user, and login providing the passfrase
you choose before, the first time you run your client it will create a key.
Strangely, it does not. And I do have nessus* installed:
[root@teich squid]# rpm -qa|sort|grep -i nessus
nessus-1.1.8-1mdk
nessus-client-1.1.8-1mdk
nessus-plugins-1.1.8-1mdk
Oh, I just noticed something else. I changed to root, did a
nessus-adduser and created a user butter. Then I created a new system
user and ran nessus. I typed in the username/password I set with
nessus-adduser, and clicked on Login. But before that, I ran nessusd
as root (without -D). Apart from the usual error message in /var/log, I
received this output:
/var/log/nessus/users/butter/auth/password: No such file or directory
Hmm, /var/log? Why does it want to create stuff in /var/log? I'd have
expected this in /var/lib/nessus, and, in fact, in /var/lib/nessus,
there IS a users directory. And even further, there IS a
/var/lib/nessus/users/butter/auth/password file!
So, why does nessus look in /var/log/nessus/users?
Somebody please do:
1) urpme $(rpm -qa|grep -i nessus)
2) rm -rfv /var/log/nessus /var/lib/nessus /etc/nessus /usr/lib/nessus
3) urpmi nessus{,-{client,plugins}}
4) nessus-adduser
5) Create a nessus user
6) useradd dummyuser
7) nessusd
8) As dummyuser: nessus
9) Type in the details set in step 5)
10) login
--
Alexander Skwar
--
How to quote: http://learn.to/quote (german) http://quote.6x.to (en)
Homepage: http://www.iso-top.de | Jabber: [EMAIL PROTECTED]
iso-top.de - Die günstige Art an Linux Distributionen zu kommen
Uptime: 1 day 13 hours 47 minutes
Re: [Cooker] Cannot use nessus
On Sat Nov 17, 2001 at 05:35:43PM +0100, Alexander Skwar wrote: Using: [root@teich nessus]# rpm -qa|grep -i nessus nessus-client-1.1.8-1mdk nessus-plugins-1.1.8-1mdk nessus-1.1.8-1mdk I added a user for nessus with nessus-adduser. Next I started nessus and typed in the username/password I set with nessus-adduser. Clicking on Login gives me an error message saying Login failed. In /var/log/nessus/nessusd.messages I get: [Sat Nov 17 17:35:10 2001][31276] connection from 127.0.0.1 [Sat Nov 17 17:35:10 2001][31276] same client 127.0.0.1 has connected twice - blocking for a while [Sat Nov 17 17:35:10 2001][32693] Client requested protocol version 12. [Sat Nov 17 17:35:10 2001][32693] bad login attempt from 127.0.0.1 Anyone successfully running nessus? Haven't seen this before. But yeah, I did fix nessus with flepied's help for cooker. I have that rpm installed on my 8.1 box and it works fine (other than some oddities with nessus itself... nmap scans seem to just sit there and do nothing). But I had no problems logging into nessusd with the client. -- [EMAIL PROTECTED], OpenPGP key available on www.keyserver.net 1024D/FE6F2AFD 88D8 0D23 8D4B 3407 5BD7 66F9 2043 D0E5 FE6F 2AFD - Danen Consulting Serviceswww.danen.net, www.freezer-burn.org - MandrakeSoft, Inc. Security www.linux-mandrake.com Current Linux kernel 2.4.8-31.1mdk uptime: 1 day 19 hours 46 minutes. msg47600/pgp0.pgp Description: PGP signature
Re: [Cooker] Cannot use nessus
On Saturday 17 November 2001 10:35 am, you wrote: Hi! Using: [root@teich nessus]# rpm -qa|grep -i nessus nessus-client-1.1.8-1mdk nessus-plugins-1.1.8-1mdk nessus-1.1.8-1mdk I added a user for nessus with nessus-adduser. Next I started nessus and typed in the username/password I set with nessus-adduser. Clicking on Login gives me an error message saying Login failed. In /var/log/nessus/nessusd.messages I get: [Sat Nov 17 17:35:10 2001][31276] connection from 127.0.0.1 [Sat Nov 17 17:35:10 2001][31276] same client 127.0.0.1 has connected twice - blocking for a while [Sat Nov 17 17:35:10 2001][32693] Client requested protocol version 12. [Sat Nov 17 17:35:10 2001][32693] bad login attempt from 127.0.0.1 Anyone successfully running nessus? Alexander Skwar Yes... I always use nessus, and its working ok... Nessus is the client and nessusd the server, they both can operate on the same pc. Install nessus, nessus-client and nessus-plugins, then as root (su) create a user, called whatever you want 'admin' for instance. and start the server with: nessusd -D The connect with the client as normal user, and login providing the passfrase you choose before, the first time you run your client it will create a key. sk
