Re: OpenVAS plans to integrate NSE support

[Ron <ron () skullsecurity net>]

Hello,

I love OpenVAS, and I think integrating NSE into it would be really cool! 

Input parameters are described in the documentation, but the difficulty is that libraries can also include input 
parameters and you therefore have to find them recursively (by looking at what includes what). 

At this point, I think what you're saying is a major weakness of Zenmap -- it has no way to prompt the user for the 
proper parameters for scripts, it expects users to just know. Maybe it's something we can explore in Zenmap as well?

On Fri, 26 Feb 2010 10:59:22 +0100 "Jan-Oliver Wagner"
<Jan-Oliver.Wagner () greenbone net> wrote:
> Hello,
>
> as you might now, the OpenVAS (www.openvas.org) framework
> uses Nmap a lot and plans even tighter integrations.
>
> The seamless integration of NSE's into the OpenVAS NVT Feed
> is now a Change Request in discussion:
>   http://www.openvas.org/openvas-cr-44.html
>
> This seamless integration works already for ovaldi to run OVAL
> scripts.
>
> However, for a very nice integration it might be helpful
> to extend the concept of NSE's. What comes to my mind first
> is that a NSE should formally describes its input parameter - thus
> allowing OpenVAS to automatically offer respective preference
> dialogs to the user.
> These are not urgent matters but if anyone here is interested
> in the topic: the OpenVAS developers are open and happy
> to coordinate/help :-)
>
> All the best
>
>       Jan
>
> -- 
> Dr. Jan-Oliver Wagner |  ++49-541-335084-0  |
> http://www.greenbone.net/ Greenbone Networks GmbH, Neuer Graben 17,
> 49074 Osnabrück | AG Osnabrück, HR B 202460 Geschäftsführer: Lukas
> Grunwald, Dr. Jan-Oliver Wagner
> _______________________________________________ Sent through the
> nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at
> http://seclists.org/nmap-dev/


-- 
Ron Bowes
http://www.skullsecurity.org
http://www.twitter.com/iagox86
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/