计算机安全超级工具（二）——漏洞扫描

Nessus


The Nessus Security Scanner is a security auditing tool. It makes

possible to test security modules in an attempt to find vulnerable

spots that should be fixed.

It is made up of two parts: a server, and a client. The server/daemon,

nessusd, is in charge of the attacks, whereas the client, nessus,

provides the user a nice X11/GTK+ interface.

This package contains the GTK+ client, which exists in other

forms and on other platforms, to
o.

Nessus客户端


This package provided a new client for the Nessus vulnerability

scanner. It has a nicer GUI than the old client and also supported

"Scopes" and "Tasks" which keep track of all the past scans and

past plugins settings.

This software has been superceded by OpenVAS-Client. This is

a transitional package so that the users of this client will get

the new software. It can be safely removed after an upgrad

e。



Nikto

Nikto is a pluggable web server and CGI scanner written in Perl, using

rfp's LibWhisker to perform fast security or informational checks.

Features:

- Easily updatable CSV-format checks database

- Output reports in plain text or HTML

- Available HTTP versions automatic switching

- Generic as well as specific server software checks

- SSL support (through libnet-ssleay-perl)

- Proxy support (with authentication)

- Cookies suppo

rt