A web server is running Python on the remote host.

Note that the web server may be running on top of Python, or just running an embedded version.

A Goverlan agent for remote control is installed on the remote host.

Ansible, an IT automation and management application, was found on the remote host.

Ansible AWX, an open-source IT automation and management application, was found on the remote host.

Splashtop Streamer, a remote control service, is installed on the remote host. 

Note: Splashtop default ports (6783, 6784, 6785) are not included in the default scan ports, and should be specified manually in the Nessus port scan range.

The web API for Kubernetes was detected on the remote host.

Oracle WebLogic Web services test client was detected on the remote host.

The web interface for HP DesignJet Printer was detected on the remote host.

TeamViewer, a remote control service, is installed on the remote Windows host.

The remote service accepts connections encrypted using TLS 1.1.
TLS 1.1 lacks support for current and recommended cipher suites.
Ciphers that support encryption before MAC computation, and authenticated encryption modes such as GCM cannot be used with TLS 1.1

PCI DSS v3.2 still allows TLS 1.1 as of June 30, 2018, but strongly recommends the use of TLS 1.2. A proposal is currently before the IETF to fully deprecate TLS 1.1 and many vendors have already proactively done this.

Rancher, a Kubernetes management platform, was detected based on the local Docker images available in the host.

Rancher, a Kubernetes management platform, was detected based on the web interface.

Flask, a micro web framework written in Python, is installed on the remote Linux host.

Nessus was able to detect the QLogic QConvergeConsole web interface  for a network interface management tool on the remote host.

Plugin deprecated by an enhancement to find_service1.nasl

Ansible Tower, an IT automation and management application, was found on the remote host.

Kubernetes, an open source system for managing containerized applications across multiple hosts, is installed on the remote Linux host.

The remote host is running Isilon OneFS, a NAS managment software.

The remote host is running an Apache Zookeeper server.

The remote host is running the WebLogic t3 Protocol.

Oracle WebLogic, a Java EE application server, was detected on the remote host.

The remote host is running an OpenVPN server. Based on its responses, the remote host appears to be in unauthenticated mode. This means that the tunnel is unencrypted and authentication is disabled.

This plugin checks the docker diff for any running containers that are analyzed by Container Security.
Note that this plugin does not run except through a licensed Container Security account.

The Cisco Smart Install (SMI) feature is enabled on the remote host.
If the SMI Client role enabled, it is subject to protocol misuse, which could allow an unauthenticated, remote attacker to:

  - Substitute the switch's startup-config file with a file that the     attacker prepared and force a reload of the switch after a defined     time interval.

  - Load the attacker-supplied IOS image onto the switch.

  - Execute high-privilege configuration mode CLI commands on the     switch, including do-exec CLI commands.

  - Copy arbitrary files from the switch to the attacker-controlled     TFTP server.

The remote service accepts connections encrypted using TLS 1.0. TLS 1.0 has a number of cryptographic design flaws. Modern implementations of TLS 1.0 mitigate these problems, but newer versions of TLS like 1.1 and 1.2 are designed against these flaws and should be used whenever possible.

PCI DSS v3.2 requires that TLS 1.0 be disabled entirely by June 30, 2018, except for POS POI terminals (and the SSL/TLS termination points to which they connect) that can be verified as not being susceptible to any known exploits.

The remote device answered a NetworkVideoTransmitter WS-Discovery request. Therefore, it supports ONVIF.

Redis, a document-oriented database system, is running on the remote host.

Oracle GoldenGate Manager, a data integration and replication solution, is running on the remote host.

The RESTful web service for AlienVault Open Source Security Information Management (OSSIM) is running on the remote host.
AlienVault OSSIM is a suite of security tools used to monitor and maintain a network.

Sophos XG Firewall, a next generation multi-protection firewall appliance, is running on the remote host.

IBM Spectrum Protect Mount, a virtual mount application that ships with Spectrum Protect, is running on the remote host.

Note that IBM Spectrum Protect was formerly known as IBM Tivoli Storage Manager (TSM) FastBack.

The remote host is an Apple TV device. Nessus was able to obtain its version and model information via an HTTP request for the '/server-info' resource.

The Docker service is running on the remote host. Docker is an open-source project that automates the deployment of applications inside software containers.

TeamSpeak 3, a proprietary Voice over IP (VoIP) conferencing software application, is running on the remote host.

This plugin detects the SAP RMI-P4 Protocol being used on the remote device.

The remote host is running Pgbouncer, a connection pooler service for PostgreSQL. Nessus was able to extract version information by logging into the Pgbouncer administrative console.

PowerFolder, a file sharing and backup utility, is running on the remote server.

A ProRat server was detected on the remote host. ProRat is a remote access trojan, which allows an attacker to control the remote system over the network.

The remote host is running Flexera FlexNet Publisher (formerly FLEXlm), a license management service. FlexNet Publisher is often bundled with third-party software and hardware license management software, and it may be part of a license management solution for a vendor other than Flexera.

Crestron QM-RMC was detected. Crestron QM-RMC is a device for networking together physical hardware for the purpose of remote control.

The remote service accepts connections encrypted using TLS 1.0. This version of TLS is affected by multiple cryptographic flaws. An attacker can exploit these flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected service and clients.

Gearman, an open source job queuing and processing service, was detected on the remote host.

The remote host is running IBM Spectrum Protect for Workstations, a backup and data protection server. This product was formerly known as IBM Tivoli Storage Manager FastBack.

The remote service provides collaborative-coding and chat platform.

An NTP server is listening on port 123. If not securely configured, it may provide information about its version, current date, current time, and possibly system information.

ID	Name	Severity
122364	Python Remote HTTP Detection	Info
122114	Goverlan Agent Remote Detection	Info
121575	Ansible Installed (Linux/UNIX)	Info
121574	Ansible AWX Installed (Linux/UNIX)	Info
121572	Splashtop Streamer remote detection	Info
121471	Kubernetes Web API Detection	Info
121396	Oracle WebLogic Web Services Test Client Detection	Info
121349	HP DesignJet Printer Web Interface Detection	Info
121245	TeamViewer remote detection	Info
121010	TLS Version 1.1 Protocol Detection	Info
119752	Rancher Docker Container Detection (Linux)	Info
119613	Rancher Web Interface Detection	Info
119602	Python Flask Installed (Linux)	Info
118332	QLogic QConvergeConsole GUI Web Interface Detection	Info
117704	HP Performance Agent detection - deprecated	Info
112215	Ansible Tower Installed (Linux/UNIX)	Info
112063	Kubernetes Installed (Linux)	Info
111678	Isilon OneFS uname Detection	Info
111677	Isilon OneFS SNMP Detection	Info
111676	Isilon OneFS NTP Detection	Info
111675	Isilon OneFS Web Interface Detection	Info
111674	Isilon OneFS FTP Detection	Info
110267	Apache Zookeeper Server Detection	Info
109552	Oracle WebLogic T3 Protocol Detection	Info
109431	Oracle WebLogic SNMP Detection (UDP)	Info
109430	Oracle WebLogic SNMP Detection (TCP)	Info
107073	Unauthenticated OpenVPN Server Detection	High
106050	Docker Container File Change Detection	Info
105161	Cisco Smart Install Detection	Info
104743	TLS Version 1.0 Protocol Detection	Info
103869	Open Network Video Interface Forum (ONVIF) Protocol Detection	Info
100635	Redis Server Detection	Info
100621	Oracle GoldenGate Manager Version Detection	Info
100382	AlienVault OSSIM REST API Service Detection	Info
96281	Sophos XG Firewall Detection	Info
96144	IBM Spectrum Protect Mount Detection	Info
93741	Apple TV Version Detection	Info
93561	Docker Service Detection	Info
93440	TeamSpeak 3 Server Detection	Info
93374	SAP RMI-P4 Protocol Detection	Info
93007	Pgbouncer Service Detection	Info
91817	PowerFolder Server Detection	Info
90894	ProRat Detection	Critical
90151	Flexera FlexNet Publisher Detection	Info
87597	Crestron QM-RMC Service Detection	Info
84470	TLS Version 1.0 Protocol Detection (PCI DSS)	High
83465	Gearman Server Detection	Info
83300	IBM Tivoli Storage Manager FastBack Server Detection	Info
83139	sobby Server Detection	Info
10884	Network Time Protocol (NTP) Server Detection	Info

Service detection Family for Nessus