關於 Plugin 系列

Nessus Network Monitor Plugin Families

Backdoors

Plugins that detect the presence of a malicious file or backdoor access that can potentially lead to unauthorized access to a system.

CGI

Plugins for vulnerabilities that leverage the common gateway interface.

Cloud Services

Plugins to identify cloud services which may place intellectual property at risk.It is not intended for social media services (social media usage detection would typically be found in the Policy family).

DNS Servers

Identifies DNS server related installations

Data Leakage

Plugins that detect protected data that is being leaked via unsecured or poorly secured protocols

Database

Plugins that relate to specific database applications and their vulnerabilities.

FTP Clients

Plugins related to FTP client detection

FTP Servers

Plugins related to the detection of FTP Servers

Finger

Plugins to identify finger daemon services

Generic

Plugins to identify general software that do not fit in any other categories, normally are host and device neutral

IMAP Servers

Plugins to identify activity reflecting IMAP Server functionality

IRC Clients

Plugins to identify the presence of IRC Clients

IRC Servers

Plugins to identify the presence of IRC Servers Functionality

Internet Messengers

Plugins to identify online chat applications

Internet Services

Plugins to identify hosted services that accept connections from the Internet

IoT

Plugins to identify Internet of Things Devices in the Network

Mobile Devices

Plugins that deal with mobile devices.

Operating System Detection

Plugins to identify different Operating Systems in the network

POP Server

Plugins to identify POP Servers in the network

Peer-To-Peer File Sharing

Plugins to identify peer-to-peer file sharing applications or services

Policy

Plugins to identify software or services that could go against a company’s acceptable use or security policy.

RPC

Plugins to identify Remote Procedure Calls

SCADA

Plugins related to Supervisory Control and Data Acquisition (SCADA)/Industrial Control System (ICS) plugins

SMTP Clients

Plugins related to the identification of SMTP Clients

SMTP Servers

Plugins related to the identification of SMTP Servers

SNMP

Plugins related to the identification of SNMP Services

SSH

Plugins to identify SSH Servers

Samba

Plugins to identify Samba services

Web Clients

Plugins specifically for web clients.

Web Servers

WAS Plugin Families

Authentication & Session

Plugins related to authentication and session issues

Code Execution

Plugins allowing code to be executed on the server and/or the application

Component Vulnerability

Information and vulnerabilities found on components used to build web applications

Cross Site Request Forgery

Plugins specifically for XSRF issues

Cross Site Scripting

Plugins specifically for all types of XSS issues

Cross Site Scripting

Plugins specifically for all types of XSS issues

File Inclusion

Plugins to identify that a file can be uploaded to the scanned asset

General

Plugins for Scan General Information

HTTP Security Header

Plugins to identify information and vulnerabilities on HTTP headers used by the web application

Injection

Plugins to identify different types of injection (SQL, noSQL, Code)

SSL/TLS

Information and vulnerabilities on the HTTPs protocol and certificates used by the web application

Web Applications

Plugins to identify information/Detection collected on the web application

Web Servers

Plugins to identify Information/Detection collected on the web server running the web application

Tenable.ot Plugin Families

SCADA

Plugins related to Supervisory Control and Data Acquisition (SCADA)/Industrial Control System (ICS) plugins