Re: Zenmap profiles

[David Fifield <david () bamsoftware com>]

On Fri, Aug 29, 2008 at 12:10:08PM +0200, Vladimir Mitrovic wrote:
> On Thu, Aug 28, 2008 at 10:14 PM, David Fifield <david () bamsoftware com> wrote:
> > You're right that this should be number 2. However the profile loader
> > would have to be rewritten to support that. The ConfigParser module
> > Zenmap uses to read scan_profiles.usp doesn't provide for recovering the
> > order of entries in a file. It turns out "Intense scan" has been the
> > default all this time simply because it comes first alphabetically.
> > Removing the sorting wouldn't help, because then the profiles come up in
> > a random order.
>
> I'm willing to take a stab at modifying ConfigParser, if that's OK. I
> think this is an important feature, it's really not user-friendly if
> the user has to resort to alphabetical ordering to make a profile the
> default one (such as creating an "aaa My Profile", to make it appear
> first in the list).

You're right, it's not good for the user. We could maybe hack around it
by reading the file after ConfigParser does, grepping out the section
headers, and using those to reorder the list before giving it to the
caller. We don't necessarily have to use ConfigParser because our needs
for the file are simple, but writing a new parser seems excessive.

> It would also be nice if there was a way to let the user *select*
> which profile is the default. Any ideas?

If the user interface would honor the order of the entires in the file
then a text editor works as a last resort. Really the profile editor
should present the entire list of profiles so you could switch between
them and reorder them.

David Fifield

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org