Re: OpenVAS XML imports

[Stephen Haywood <stephen () averagesecurityguy info>]

I should be able to fix the OMP error. Give me a couple of days. Not
sure about the db_import error.

Stephen Haywood
Owner, ASG Consulting
CISSP, GSEC, OSCP
W: www.averagesecurityguy.info
T: @averagesecguy

On Apr 15, 2013, at 3:51 AM, Geoff Galitz <geoff () galitz org> wrote:

> Hi.
>
> Testing with metasploit v4.6.0-dev [core:4.6 api:1.0]
>
>
> When doing the import directly via the OpeVAS plugin I get:
> -----------------------------
>
> msf > openvas_report_import  24 7
> [-] OpenVAS OMP: Error in OMP request/response
>
>
>
>
> When doing a db_import from a previously exported OpenVAS XML report:
> -----------------------------
>
> msf > db_import /tmp/ovas-report.xml
> [*] Importing 'OpenVAS XML' data
> [-] Error while running command db_import: Symbol as array index
>
> Call stack:
> /opt/msf3/lib/msf/core/db.rb:1555:in `[]'
> /opt/msf3/lib/msf/core/db.rb:1555:in `report_vuln'
> /opt/msf3/lib/rex/parser/nokogiri_doc_mixin.rb:151:in `send'
> /opt/msf3/lib/rex/parser/nokogiri_doc_mixin.rb:151:in `db_report'
> /opt/msf3/lib/rex/parser/openvas_nokogiri.rb:135:in `record_vuln'
> /opt/msf3/lib/rex/parser/openvas_nokogiri.rb:126:in `each'
> /opt/msf3/lib/rex/parser/openvas_nokogiri.rb:126:in `record_vuln'
> /opt/msf3/lib/rex/parser/openvas_nokogiri.rb:67:in `end_element'
> /usr/lib/ruby/1.8/nokogiri/xml/sax/document.rb:125:in `end_element_namespace'
> /usr/lib/ruby/1.8/nokogiri/xml/sax/parser.rb:110:in `parse_with'
> /usr/lib/ruby/1.8/nokogiri/xml/sax/parser.rb:110:in `parse_memory'
> /usr/lib/ruby/1.8/nokogiri/xml/sax/parser.rb:83:in `parse'
> /opt/msf3/lib/msf/core/db.rb:3072:in `import_openvas_new_xml'
> /opt/msf3/lib/msf/core/db.rb:2794:in `send'
> /opt/msf3/lib/msf/core/db.rb:2794:in `import'
> /opt/msf3/lib/msf/core/db.rb:2778:in `import_file'
> /opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1234:in `cmd_db_import'
> /opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1227:in `each'
> /opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1227:in `cmd_db_import'
> /opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1221:in `each'
> /opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1221:in `cmd_db_import'
> /opt/msf3/lib/msf/core/patches/active_record.rb:22:in `with_connection'
> /opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1216:in `cmd_db_import'
> /opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:427:in `send'
> /opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:427:in `run_command'
> /opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:389:in `run_single'
> /opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:383:in `each'
> /opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:383:in `run_single'
> /opt/msf3/lib/rex/ui/text/shell.rb:200:in `run'
> ./msfconsole:168
> msf >
>
>
>
>
>
>
>
> > What error are getting? The OpenVAS connector uses the built in
> > db_import functionality so there's probably an error in connector.
> >
> > Stephen Haywood
> > Owner, ASG Consulting
> > CISSP, GSEC, OSCP
> > W: www.averagesecurityguy.info
> > T: @averagesecguy
> >
> > On Apr 14, 2013, at 2:15 PM, Geoff Galitz <geoff () galitz org> wrote:
> >
> > > Hi all.
> > >
> > > According to recent work, importing OpenVAS reports via XML is
> > > supported,
> > > but I have tried this in various scenarios and I cannot get this to
> > > work.
> > > I always get an generic OMP error that the import or report download
> > > failed.
> > >
> > > So my question.. does anyone have this working?
> > >
> > > -G
> > >
> > >
> > >
> > >
> > > ------------------------------
> > > Geoff Galitz
> > > http://www.galitz.org
> > >
> > > _______________________________________________
> > > https://mail.metasploit.com/mailman/listinfo/framework
>
>
> ------------------------------
> Geoff Galitz
> http://www.galitz.org
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework