Re: Offering some NSE help :)

[stripes <stripes () tigerlair com>]

On Sat, Sep 13, 2008 at 05:08:23PM +0200, Diman Todorov wrote:
> Actually porting NASL scripts is not a task we're investing much
> effort into. For one, most NASL scripts are under a restrictive
> license. And also, while Nessus has a large script database, the
> magnitude of the scripts are quite old and maybe defunct. Porting
> scripts is also not easier than writing scripts from scratch. In the
> past there have been a few efforts to automatically port scripts from
> other platforms to NSE, most of them fizzled away (for various
> reasons).

Agreed. I really don't want to go that direction. OpenVAS already is.

> A good source for NSE information is the Nmap book. You can find most
> of the chapter on NSE here http://nmap.org/book/nse.html I would
> recommend buying the Nmap book when it is finally released (nudge,
> nudge, Fyodor ;).

Yep, already looking through it. :)

> Recently NSE got a lot of library functionality for working with DNS,
> SNMP and interacting with the interweb (HTTP, HTML, XMLRPC etc.)

Great! Is this using Lua code or other things? I'd like to do Webapp type scripts with Nmap if that's possible.

If not, I can work on other things. I have to start simple, so anyting you need done, lemme know where I can help.

> Depending on your interest you could write scripts in NSE or extend
> the NSE standard library. To get an idea of what can be done with NSE
> and what are its limitations I recommend looking through the existing
> NSE scripts (there are not that many of them :) and skimming through
> the nmap-dev archives which have a few interesting threads discussing
> strengths and weaknesses of NSE.

Unfortuatenly, I probably won't be great with libraries, but I'll be more helpful on the scripting side.

What do we need done, and who do I ask for pointers and help when needed?

-Anne
--
I get plenty of exercise- jumping   (\`--/') _ _______ .-r-.  
to conclusions, pushing my luck,     >.~.\ `` ` `,`,`. ,'_'~`.          
and dodging deadlines. -Anonymous   (v_," ; `,-\ ; : ; \/,-~) \            
stripes at tigerlair dot com         `--'_..),-/ ' ' '_.>-' )`.`.__.')   
stripes at brickbox dot com         ((,((,__..'~~~~~~((,__..'  `-..-'fL    

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org