Mailing List Archive

On 03/14/07 17:30, Chambers, Daryl [HDS] wrote:

> Is the Knowledge Base a data base I can go to to pick up data related to
> my scans?

Generally yes.

> How would I go about
> accomplishing this?

One approach would be to ensure that you've enabled keyboard saving in
your client configurations, then extract the information from the KBs
themselves with something like Perl. KBs are stored under the Nessus
user's directory on the Nessus server; eg,
./opt/nessus/var/nessus/users/$user/kbs/$host.

Another would be to write a plugin as Ferdy already suggested and pull
the information in using something like get_kb_item(). Assuming you have
a registered / direct feed, you could look at, say, opera_installed.nasl
and opera_910.nasl -- the latter pulls the version number discovered by
the first plugin and uses it in deciding whether to report a vulnerable
version installed.

George
--
theall@tenablesecurity.com
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers

>One approach would be to ensure that you've enabled keyboard saving in
>your client configurations, then extract the information from the KBs
>themselves with something like Perl. KBs are stored under the Nessus
>user's directory on the Nessus server; eg,
>./opt/nessus/var/nessus/users/$user/kbs/$host.

This is closer to the approach I was looking for. I have already
determined that a script exists, and is running that writes the
information I am seeking to the KB. Now I am running these scans over
multiple subnets, so when I go to attempt to retrieve the data, I have
to span multiple folders, sub-folders, and files. Has anyone written a
parser that can be fed a plugin, subnet(s) and user ID that will then
traverse the multitude of folders and produce a report of devices that
list an entry from said plugin?

_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers