Re: [NSE] sqlite-output

[Daniel Miller <bonsaiviking () gmail com>]

Michael,

This is an interesting use of NSE. I'm sure it will be useful to some
folks. I would venture to note, though, that it's vulnerable to SQL
injection if any service version contains a single quote (quite likely in
some cases).

Dan


On Wed, Apr 30, 2014 at 7:14 PM, Michael Clemens <odie () blinkenshell org>wrote:

> Hello all,
>
> I wrote a simple script that stores some of nmap's scan output into a
> sqlite database. You can find the script here:
> https://github.com/exitnode/nmap-sqlite-output/blob/
> master/sqlite-output.nse
>
> Maybe some of you may find it useful when performing inventory scans.
> Having the output stored inside a sql database makes it a little easier to
> generate reports. Feedback would be great.
>
> Thanks,
> Michael
> _______________________________________________
> Sent through the dev mailing list
> http://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/