Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Nessus: users

Plugin to detect domain membership?

 

 

Nessus users RSS feed   Index | Next | Previous | View Threaded


rvandolson at esri

Feb 18, 2009, 2:56 PM

Post #1 of 4 (5280 views)
Permalink
Plugin to detect domain membership?

Anyone have a quickie script to confirm domain membership based on the
SMB credentials provided?

Looks like I might be able to make use of plugin 10394 for this, but
maybe someone already has something ready for use.

Thanks,
Ray
_______________________________________________
Nessus mailing list
Nessus [at] list
http://mail.nessus.org/mailman/listinfo/nessus


raleel at gmail

Feb 18, 2009, 7:41 PM

Post #2 of 4 (4882 views)
Permalink
Re: Plugin to detect domain membership? [In reply to]

yes, I do. lemme get it out in the morning.

On Wed, Feb 18, 2009 at 2:56 PM, Ray Van Dolson <rvandolson [at] esri> wrote:

> Anyone have a quickie script to confirm domain membership based on the
> SMB credentials provided?
>
> Looks like I might be able to make use of plugin 10394 for this, but
> maybe someone already has something ready for use.
>
> Thanks,
> Ray
> _______________________________________________
> Nessus mailing list
> Nessus [at] list
> http://mail.nessus.org/mailman/listinfo/nessus
>



--
Doug Nordwall
Unix, Network, and Security Administrator
You mean the vision is subject to low subscription rates?!!? - Scott Stone,
on MMORPGs


rvandolson at esri

Feb 18, 2009, 9:06 PM

Post #3 of 4 (4882 views)
Permalink
Re: Plugin to detect domain membership? [In reply to]

On Wed, Feb 18, 2009 at 07:41:00PM -0800, Doug Nordwall wrote:
> yes, I do. lemme get it out in the morning.
>

Thanks Doug. Looking forward to seeing how you implemented it. In the
interim, I used the smb_login.nasl script and just parse the output for
the mention of the credentials we're using to authenticate. If it's
present in the output I assume the machine must be a member of the
domain.

Ray

> On Wed, Feb 18, 2009 at 2:56 PM, Ray Van Dolson <rvandolson [at] esri>
> wrote:
>
> Anyone have a quickie script to confirm domain membership based on
> the
> SMB credentials provided?
>
> Looks like I might be able to make use of plugin 10394 for this, but
> maybe someone already has something ready for use.
>
> Thanks,
> Ray
_______________________________________________
Nessus mailing list
Nessus [at] list
http://mail.nessus.org/mailman/listinfo/nessus


raleel at gmail

Feb 19, 2009, 9:25 AM

Post #4 of 4 (4884 views)
Permalink
Re: Plugin to detect domain membership? [In reply to]

here you go. should work on windows boxes and not false positive on unix
boxes with smb. will return a high if it can't get into the box.

On Thu, Feb 19, 2009 at 12:06 AM, Ray Van Dolson <rvandolson [at] esri>wrote:

> On Wed, Feb 18, 2009 at 07:41:00PM -0800, Doug Nordwall wrote:
> > yes, I do. lemme get it out in the morning.
> >
>
> Thanks Doug. Looking forward to seeing how you implemented it. In the
> interim, I used the smb_login.nasl script and just parse the output for
> the mention of the credentials we're using to authenticate. If it's
> present in the output I assume the machine must be a member of the
> domain.
>
> Ray
>
> > On Wed, Feb 18, 2009 at 2:56 PM, Ray Van Dolson <rvandolson [at] esri>
> > wrote:
> >
> > Anyone have a quickie script to confirm domain membership based on
> > the
> > SMB credentials provided?
> >
> > Looks like I might be able to make use of plugin 10394 for this, but
> > maybe someone already has something ready for use.
> >
> > Thanks,
> > Ray
>



--
Doug Nordwall
Unix, Network, and Security Administrator
You mean the vision is subject to low subscription rates?!!? - Scott Stone,
on MMORPGs
Attachments: smb_domain_check.nasl (4.81 KB)

Nessus users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.