What's the difference between the "Denial of Service" plugin family and other plugins with "DoS" in the Plugin Name but located in different families? Can those other plugins also cause DoSs during scans?

  • This is more of a question for Nessus and the documentation. You are also making the assumption that DoS means that the plugin could DoS the target and not that it is testing the vulnerability to DoS attacks.
    – schroeder
    Mar 13 '17 at 14:03
  • As far as I can tell, the documentation refers to the plugin family in conjunction with the Safe Checks feature (docs.tenable.com/nessus/6_8/Content/Plugins.htm) but nothing specifically mentions DoS plugins that are not in this family.
    – user138080
    Mar 13 '17 at 14:06

As stated in the nessus documentation. members of the "Denial of Service" family are direct checks that in some cases attempt to exploit the DoS vulnerability they are testing for.

The Denial of Service family contains some plugins that could cause outages on a network if the Safe Checks option is not enabled, in addition to some useful checks that will not cause any harm. The Denial of Service family can be used in conjunction with Safe Checks to ensure that any potentially dangerous plugins are not run. However, it is recommended that the Denial of Service family not be used on a production network unless scheduled during a maintenance window and with staff ready to respond to any issues.

Nessus plugins with DoS in the name and not in the 'Denial of Service' plugin family are often simple checks that verify if the target is vulnerable to X DoS vulnerability based on the reported version.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.