Home page logo
/

metasploit logo Metasploit mailing list archives

Re: OpenVAS XML imports
From: "Geoff Galitz" <geoff () galitz org>
Date: Mon, 15 Apr 2013 06:49:22 -0700



Much appreciated.

-G



I should be able to fix the OMP error. Give me a couple of days. Not
sure about the db_import error.

Stephen Haywood
Owner, ASG Consulting
CISSP, GSEC, OSCP
W: www.averagesecurityguy.info
T: @averagesecguy

On Apr 15, 2013, at 3:51 AM, Geoff Galitz <geoff () galitz org> wrote:



Hi.

Testing with metasploit v4.6.0-dev [core:4.6 api:1.0]


When doing the import directly via the OpeVAS plugin I get:
-----------------------------

msf > openvas_report_import  24 7
[-] OpenVAS OMP: Error in OMP request/response




When doing a db_import from a previously exported OpenVAS XML report:
-----------------------------

msf > db_import /tmp/ovas-report.xml
[*] Importing 'OpenVAS XML' data
[-] Error while running command db_import: Symbol as array index

Call stack:
/opt/msf3/lib/msf/core/db.rb:1555:in `[]'
/opt/msf3/lib/msf/core/db.rb:1555:in `report_vuln'
/opt/msf3/lib/rex/parser/nokogiri_doc_mixin.rb:151:in `send'
/opt/msf3/lib/rex/parser/nokogiri_doc_mixin.rb:151:in `db_report'
/opt/msf3/lib/rex/parser/openvas_nokogiri.rb:135:in `record_vuln'
/opt/msf3/lib/rex/parser/openvas_nokogiri.rb:126:in `each'
/opt/msf3/lib/rex/parser/openvas_nokogiri.rb:126:in `record_vuln'
/opt/msf3/lib/rex/parser/openvas_nokogiri.rb:67:in `end_element'
/usr/lib/ruby/1.8/nokogiri/xml/sax/document.rb:125:in
`end_element_namespace'
/usr/lib/ruby/1.8/nokogiri/xml/sax/parser.rb:110:in `parse_with'
/usr/lib/ruby/1.8/nokogiri/xml/sax/parser.rb:110:in `parse_memory'
/usr/lib/ruby/1.8/nokogiri/xml/sax/parser.rb:83:in `parse'
/opt/msf3/lib/msf/core/db.rb:3072:in `import_openvas_new_xml'
/opt/msf3/lib/msf/core/db.rb:2794:in `send'
/opt/msf3/lib/msf/core/db.rb:2794:in `import'
/opt/msf3/lib/msf/core/db.rb:2778:in `import_file'
/opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1234:in
`cmd_db_import'
/opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1227:in `each'
/opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1227:in
`cmd_db_import'
/opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1221:in `each'
/opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1221:in
`cmd_db_import'
/opt/msf3/lib/msf/core/patches/active_record.rb:22:in `with_connection'
/opt/msf3/lib/msf/ui/console/command_dispatcher/db.rb:1216:in
`cmd_db_import'
/opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:427:in `send'
/opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:427:in `run_command'
/opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:389:in `run_single'
/opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:383:in `each'
/opt/msf3/lib/rex/ui/text/dispatcher_shell.rb:383:in `run_single'
/opt/msf3/lib/rex/ui/text/shell.rb:200:in `run'
./msfconsole:168
msf >







What error are getting? The OpenVAS connector uses the built in
db_import functionality so there's probably an error in connector.

Stephen Haywood
Owner, ASG Consulting
CISSP, GSEC, OSCP
W: www.averagesecurityguy.info
T: @averagesecguy

On Apr 14, 2013, at 2:15 PM, Geoff Galitz <geoff () galitz org> wrote:


Hi all.

According to recent work, importing OpenVAS reports via XML is
supported,
but I have tried this in various scenarios and I cannot get this to
work.
I always get an generic OMP error that the import or report download
failed.

So my question.. does anyone have this working?

-G




------------------------------
Geoff Galitz
http://www.galitz.org

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


------------------------------
Geoff Galitz
http://www.galitz.org




------------------------------
Geoff Galitz
http://www.galitz.org

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]