Port 443 and xss

[George A. Theall]

On Tue, Apr 05, 2005 at 09:55:03AM +0900, ian acces wrote:

> If optimize mode is not enabled is the script run against
> all ports?

No, not really. Nessusd launches the script against a target
as a whole while the script itself determines which ports to
attack. In the case of web-related scripts, a plugin
typically does this by calling get_http_port(), which
returns a port previously identified as running a web server
(if there are multiple ports, the plugin forks automatically
and each child handles a different port by itself).

George

--
theall at tenablesecurity.com