Jaime Blasco Blog : /Nessus

Last Scada OPC Nessus Plugins
Thu, 21 Aug 2008

We have released some new Nessus Plugins related to OPC Servers security issues.

List of New OPC Nessus Plugins:

Multiple vulnerabilities in Comsoft Profibus OPC server

Multiple vulnerabilities in Beijer Electronics OPC server

Multiple vulnerabilities in VIPA OPC server

Multiple vulnerabilities in Gesytec Easylon OPC server 2.0

Multiple vulnerabilities in Junzhi BACnet OPC server

Multiple vulnerabilities in IPCDAS NAPOPC OPC server

Multiple vulnerabilities in Klinkmann SPA OPC server

Multiple vulnerabilities in Newron System NLOPC OPC server

Multiple vulnerabilities in Wizcon Supervisor OPC DA Server

posted at: 08:57 | path: /Nessus/plugins | permanent link to this entry | 0 comments | nessus, scada, opc

New Scada OPC Nessus Plugins
Mon, 11 Aug 2008

Today we have released some new Nessus Plugins related to OPC Servers security issues.

List of New OPC Nessus Plugins:

Multiple vulnerabilities in KEPware KEPServerEx 4 OPC server

Multiple vulnerabilities in Triangle MicroWorks OPC Server 2.0.2

Multiple vulnerabilities in Comsoft L1 OPC server

We'll release new plugins related to OPC and Scada in general during the next weeks!!!

posted at: 09:50 | path: /Nessus/plugins | permanent link to this entry | 0 comments | nessus, scada, opc

Parsing Cisco Mib
Wed, 06 Aug 2008

I wrote a little python script to parse Cisco mib. I need this information to implement part of the Nessus Feed Cisco stuff, for example to retrieve the cisco model from snmp.

#
# Parse Cisco Products MIB
#
# You can download mib file from http://www.oidview.com/mibs/9/CISCO-PRODUCTS-MIB.html
#

import re
import fileinput

for line in fileinput.input("cisco_mib_parse.txt"):
        #catalyst296024LT                OBJECT IDENTIFIER ::= { ciscoProducts 951 } -- 24 10/100, 8 POE and 2T ports switch
        p = re.compile("(\S+).*ciscoProducts ([0-9]+)")
        m = p.match(line)
        model = m.group(1)
        number = m.group(2)

posted at: 11:48 | path: /Nessus/cisco | permanent link to this entry | 1 comments | nessus, cisco

AlienVault Free Nessus Feed
Wed, 06 Aug 2008

We have started a Free Nessus Feed you'll found more information at the nessus feed page: http://www.alienvault.com/free_nessus_feed.php

posted at: 11:45 | path: /Nessus | permanent link to this entry | 0 comments | nessus, alienvault

Showing relation graph between nessus scripts and include files
Wed, 06 Aug 2008

I have make an interesting graph showing the relation between nessus scripts and include files

Click to view large image

posted at: 11:42 | path: /Nessus | permanent link to this entry | 3 comments | nessus,visualization

Scada: OPC Nessus Plugins
Wed, 06 Aug 2008

During the development of the Free Nessus Feed we are writing some interesting plugins about Scada.

Today we released some plugins relating to OPC (OLE for Process Control) Servers, OPC standard specifies the communication of real-time plant data between control devices from different manufacturers.

List of OPC Nessus Plugins:

Multiple vulnerabilities in NETxEIB OPC server CVE-2007-1313

Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server CVE-2007-1313

Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server CVE-2007-1319

Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server CVE-2007-1319

Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server CVE-2007-1319

We have write some functions for accesing DCOM Applications information throught WMI.

posted at: 11:41 | path: /Nessus/plugins | permanent link to this entry | 0 comments | nessus, scada, opc