Re: parsing XML with NSE

["DePriest, Jason R." <jrdepriest () gmail com>]

On Thu, Aug 26, 2010 at 3:41 PM, David Fifield <> wrote:
> On Tue, Aug 24, 2010 at 07:42:01PM -0400, Patrick Donnelly wrote:
> > On Tue, Aug 24, 2010 at 5:55 PM, DePriest, Jason R.
> > <jrdepriest () gmail com> wrote:
> > > Is there an XML parser available for NSE that could take XML and turn
> > > it in to Lua tables?
> > >
> > > I've read http://lua-users.org/wiki/LuaXml which says that you can get
> > > Lua to do it, but it isn't built-in.  Is something like LuaXML already
> > > present?
> > >
> > > On another note, it would be nice if whatever parser existed could
> > > also handle XSLT filtes.
> > >
> > > I was starting to work on an NSE script that can parse the NAI ePolicy
> > > Orchestrator agent information available from port 8081 on hosts
> > > running ePO Agent, but I don't want to duplicate work if there is a
> > > library I can already plug in.
> >
> > There most definitely is somewhere. I'll go on a search. For those
> > wondering, the lua-users.org site just got moved to new servers and
> > the DNS might not be up to speed in your area (it's not for me).
>
> Ryan Linn, who wrote an NSE–Metasploit binding called Nsploit, used a
> Lua binding of Expat called lxp. This is what's reflected at the moment
> in his online repository viewer.
>
> http://trac.happypacket.net/browser/nsploit/trunk/nselib/Nsploit.lua
>
> However I spoke to him at the conferences in Las Vegas and he said that
> he had removed the dependency on lxp. He posted some code at
> http://www.happypacket.net/VegasCode2010.tar.bz2 and it looks like he
> made a new library, Nxmlrpc.lua, based on the "Classic Lua-only version"
> at http://lua-users.org/wiki/LuaXml.
>
> If an XML parser can be that small and do everything we need it to, I
> wouldn't hesitate to add it as a new library.
>
> David Fifield

Do you think you can just pull the library out of the tarball and use
it as is or would it require further tweaking?

Do you have a way of contacting the author and asking if it is okay
for us to do that?

-Jason
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/