Penetration Testing mailing list archives

Re: Nessus, Harmful?


From: Adel Abushaev <adel.abushaev () gmail com>
Date: Mon, 11 Jan 2010 11:31:54 -0800

It depends on the set of tests you choose, either safe or evasive.
Even safe tests could trigger bad stuff. I have a history of crashing
core routers by sending wrong IKE packets to them from Nessus. If it's
a live operational equipment, you need to schedule a possible downtime
and have all necessary support people on duty.

Adel.

On Wed, Jan 6, 2010 at 9:17 PM, Zaki Akhmad <zakiakhmad () gmail com> wrote:
Hello,

I want to do a nessus scanning, but before I'd like to know is it
nessus scanning harmful? Because I don't want to make the server down.

Thanks!
--
Zaki Akhmad

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: