Re: Re: [OT] - HELP PLEASE we've been hacked.

["Mark Harrison \(Yahoo!\)" <mph@xxxxxxxxxxxxxxx>]

Nessus is a two-part beast..

The server, which actually does the scanning.

The client, which provides a GUI to set up scans and run reports, etc.

Neither is difficult to configure IF you have a spare linux box handy :-o


There are clients for linux or Windows.

The server is a different beast - the standard Nessus server only runs on
Linux (or other POSIX systems, including MAYBE, OSX for the Mac.)

There is a Windows port of the server, but it costs money, and it's not
clear how good it really is compared to the "real" Nessus server.

M.


----- Original Message -----
From: "Dean Barrett" <dean@xxxxxxx>
To: <ukha_d@xxxxxxx>
Sent: Tuesday, April 13, 2004 8:21 PM
Subject: RE: [ukha_d] Re: [OT] - HELP PLEASE we've been hacked.


I saw someone charging £50.00 to run Nessus to check your website for you.

Is Nessus that complex to configure ?


Dean.


-----Original Message-----
From: Mark Harrison (Yahoo!) [mailto:mph@xxxxxxx]
Sent: 13 April 2004 19:34
To: ukha_d@xxxxxxx
Subject: Re: [ukha_d] Re: [OT] - HELP PLEASE we've been hacked.

1: Have no actual skill, but a geek belief that by hacking products from
the
evil Microsoft you are "helping".

2: Download a scanner like Nessus.

3: Run Nessus, input range of IP addresses to scan.

4: Come back later.

Nessus will do a number of things:

3a: Scan for open ports
3b: Scan for known vulnerabilities
3c: Produce a report of what needs sorting out

Used properly, it's a great tool - I use it for penetration testing (with
permission from clients in advance!!!!). However, used improperly, it's a
good way for no-talent scripts puppies to find holes in security configs.

OK - it may not have been Nessus they used, there are others out there -
but
the principle remains.

M.


----- Original Message -----
From: "Dean Barrett" <dean@xxxxxxx>
To: <ukha_d@xxxxxxx>
Sent: Tuesday, April 13, 2004 7:04 PM
Subject: RE: [ukha_d] Re: [OT] - HELP PLEASE we've been hacked.


> I would be grateful for someone to explain HOW they did it ?




UK Home Automation Meet 2004 - BOOK NOW!
http://www.ukha2004.com

http://www.automatedhome.co.uk

Member Offers - http://www.freeranger.co.uk/ukha