Re: cant import nessus scan results to Armitage

[Zate <zate75 () gmail com>]

And Raphael contacted me off the list and I am pretty sure that the nessus
plugin can be adapted to work with Armitage.  I will take a look at that
this weekend, it needs to be cleaned up in that regards anyhow.

the benefit of that is the ability to reach out and grab the reports
directly from the nessus servers, vs saving them and moving them.

thanks.

Zate


On Thu, Feb 10, 2011 at 8:12 PM, Raphael M
<contact () fastandeasyhacking com>wrote:

> Hi Juan,
> Armitage uses Metasploit's RPC API to import stuff into the DB without
> any additional processing. Check that you're importing something
> Metasploit can handle. For your .nessus file, try db_import_nessus_xml
> from a console tab or use the import auto-detect menu item in
> Armitage.
>
> I've taken a note on this and will try to make Armitage report
> something if the import fails for some reason.
>
> -- Raphael (Armitage Developer)
>
> > ------------------------------
> >
> > Message: 3
> > Date: Thu, 10 Feb 2011 07:13:30 -0800 (PST)
> > From: Juan B <juanbabi () yahoo com>
> > To: framework () spool metasploit com
> > Subject: [framework] cant import nessus scan results to Armitage
> > Message-ID: <53744.3876.qm () web36806 mail mud yahoo com>
> > Content-Type: text/plain; charset=us-ascii
> >
> > Hi Guys,
> >
> > excuse me for asking some questions about armitage..
> >
> > well the thing is that I scan the lan with nessus and save 9the report in
> > .nessus format so then I try to import it to Armitage using Hosts-Import
> hosts-
> > Nessus scan results (NBE) it tells me that the import was soccesful but
> in the
> > target window i dont see any new hosts..what am I doing wrong?
> >
> > thanks a lot !
> >
> > juan
> >
> >
> >
> >
> >
> > ------------------------------
> >
> > Message: 4
> > Date: Thu, 10 Feb 2011 07:17:43 -0800 (PST)
> > From: Juan B <juanbabi () yahoo com>
> > To: framework () spool metasploit com
> > Subject: [framework] cant import nessus scan results to Armitage
> >        another thing !!
> > Message-ID: <631670.90872.qm () web36805 mail mud yahoo com>
> > Content-Type: text/plain; charset=us-ascii
> >
> > I see on the log windows this:
> >
> >  The markup in the document preceding the root element must
> > b                                            e well-formed.
> > Warning: invalid use of index operator: $null['hosts'] at targets.sl:367
> >
> >
> > maybe thats way I doesnt import well the files and I dont see the
> imported hosts
> > in the target manu? I scan with nessus in a windows bos and then I drag
> it to BT
> > in vmware. whats wrong?
> > thanks
> >
> > juan
> >
> >
> >
> > ----- Forwarded Message ----
> > From: Juan B <juanbabi () yahoo com>
> > To: framework () spool metasploit com
> > Sent: Thu, February 10, 2011 10:13:30 AM
> > Subject: cant import nessus scan results to Armitage
> >
> > Hi Guys,
> >
> > excuse me for asking some questions about armitage..
> >
> > well the thing is that I scan the lan with nessus and save 9the report in
> > .nessus format so then I try to import it to Armitage using Hosts-Import
> hosts-
> > Nessus scan results (NBE) it tells me that the import was soccesful but
> in the
> > target window i dont see any new hosts..what am I doing wrong?
> >
> > thanks a lot !
> >
> > juan
> >
> >
> >
> >
> >
> > ------------------------------
> >
> > Message: 5
> > Date: Thu, 10 Feb 2011 11:13:38 -0500
> > From: Zate <zate75 () gmail com>
> > To: framework () spool metasploit com
> > Subject: Re: [framework] cant import nessus scan results to Armitage
> >        another thing !!
> > Message-ID:
> >        <AANLkTi=Ec6K4v0+SCV4zDKwFHoUExKyBj0pMnZL5rGQd () mail gmail com>
> > Content-Type: text/plain; charset="iso-8859-1"
> >
> > My advice would be:
> >
> > msfconsole
> > load nessus
> >
> > Havent taken a look at adding Armitage compatibility for the nessus
> plugin
> > yet.  I might take a look in the near future but I don't use Armitage at
> > all, so i'd need to work out how it all integrates first.
> >
> > Zate
> >
> >
> > On Thu, Feb 10, 2011 at 10:17 AM, Juan B <juanbabi () yahoo com> wrote:
> >
> > > I see on the log windows this:
> > >
> > >  The markup in the document preceding the root element must
> > > b                                            e well-formed.
> > > Warning: invalid use of index operator: $null['hosts'] at
> targets.sl:367
> > > maybe thats way I doesnt import well the files and I dont see the
> imported
> > > hosts
> > > in the target manu? I scan with nessus in a windows bos and then I drag
> it
> > > to BT
> > > in vmware. whats wrong?
> > > thanks
> > >
> > > juan
> > >
> > >
> > >
> > > ----- Forwarded Message ----
> > > From: Juan B <juanbabi () yahoo com>
> > > To: framework () spool metasploit com
> > > Sent: Thu, February 10, 2011 10:13:30 AM
> > > Subject: cant import nessus scan results to Armitage
> > >
> > > Hi Guys,
> > >
> > > excuse me for asking some questions about armitage..
> > >
> > > well the thing is that I scan the lan with nessus and save 9the report
> in
> > > .nessus format so then I try to import it to Armitage using Hosts-Import
> > > hosts-
> > > Nessus scan results (NBE) it tells me that the import was soccesful but
> in
> > > the
> > > target window i dont see any new hosts..what am I doing wrong?
> > >
> > > thanks a lot !
> > >
> > > juan
> > >
> > >
> > >
> > > _______________________________________________
> > > https://mail.metasploit.com/mailman/listinfo/framework
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: <
> http://mail.metasploit.com/pipermail/framework/attachments/20110210/69b18296/attachment-0001.html
> > ------------------------------
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework