Russell Fulton
2004-05-03 07:55:05 UTC
Hi All,
I have been looking at using some plugins (currently smb_kb835732.nasl)
from the command line nasl tool. I want to do this rather than use the
server for a variety of reasons mainly to do with the fact that I am
generating the addresses to be probed from inside other applications and
I want to be able to do the probes from within those apps. The
alternative is to get the verbose results and then have to parse them
back into the app. All I need to do is run a single plugin and get a
yes/no answer.
So far as I can see nasl prints "Success" if the script finds a
vulnerability. What I would find much more useful would be if the
program return a non zero exit code so I can catch it in the wait().
I've looked at the source and I am having trouble figuring out where the
'Success' code is generated -- so far as I can tell it is in the guts of
the regex code -- but that does not seem likely.
Any hints on how to set the exit code for nasl would be appreciated.
As an alternative I would like to get it to print the probed IP along
with the 'Success'.
I am more than happy to contribute any changes I make back to the
project.
Cheers, Russell
I have been looking at using some plugins (currently smb_kb835732.nasl)
from the command line nasl tool. I want to do this rather than use the
server for a variety of reasons mainly to do with the fact that I am
generating the addresses to be probed from inside other applications and
I want to be able to do the probes from within those apps. The
alternative is to get the verbose results and then have to parse them
back into the app. All I need to do is run a single plugin and get a
yes/no answer.
So far as I can see nasl prints "Success" if the script finds a
vulnerability. What I would find much more useful would be if the
program return a non zero exit code so I can catch it in the wait().
I've looked at the source and I am having trouble figuring out where the
'Success' code is generated -- so far as I can tell it is in the guts of
the regex code -- but that does not seem likely.
Any hints on how to set the exit code for nasl would be appreciated.
As an alternative I would like to get it to print the probed IP along
with the 'Success'.
I am more than happy to contribute any changes I make back to the
project.
Cheers, Russell
--
Russell Fulton /~\ The ASCII
Network Security Officer \ / Ribbon Campaign
The University of Auckland X Against HTML
New Zealand / \ Email!
Russell Fulton /~\ The ASCII
Network Security Officer \ / Ribbon Campaign
The University of Auckland X Against HTML
New Zealand / \ Email!