From filipe.custodio at gmail.com Thu May 4 01:03:28 2006 From: filipe.custodio at gmail.com (Filipe Custodio) Date: Thu, 4 May 2006 00:03:28 +0100 Subject: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) Message-ID: Hi! Just got OpeVAS to do its first scan on my machine :-) I noticed some obsolete plugins are still included, like "gpl_feed.nasl", which reports: You are running a version of Nessus which is not configured to receive a full plugin feed. As a result, the security audit of the remote host produced incomplete results. To obtain a complete plugin feed, you need to register your Nessus scanner at http://www.nessus.org/register/ then run nessus-update-plugins to get the full list of Nessus plugins. Is there some effort going on to "cleanup" the plugin database? How can I help? Best regards, -- Filipe Cust?dio Consultor Especialista em Seguran?a de SI -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.wald.intevation.org/pipermail/openvas-plugins/attachments/20060504/f78c54e9/attachment.htm From stripes at tigerlair.com Thu May 4 01:15:04 2006 From: stripes at tigerlair.com (stripes) Date: Wed, 3 May 2006 19:15:04 -0400 Subject: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) In-Reply-To: ; from filipe.custodio@gmail.com on Thu, May 04, 2006 at 12:03:28AM +0100 References: Message-ID: <20060503191504.A41@tigerlair.com> Hi Filipe, Yes, I'm currently working on cleaning up the plugins; however, I have heard nothing but crickets from anyone else :( -Anne On Thu, May 04, 2006 at 12:03:28AM +0100, Filipe Custodio wrote: > Hi! > > Just got OpeVAS to do its first scan on my machine :-) > > I noticed some obsolete plugins are still included, like "gpl_feed.nasl", > which reports: > > You are running a version of Nessus which is not configured to receive > a full plugin feed. As a result, the security audit of the remote host > produced > incomplete results. > > To obtain a complete plugin feed, you need to register your Nessus scanner > at http://www.nessus.org/register/ then run nessus-update-plugins to get > the full list of Nessus plugins. > > Is there some effort going on to "cleanup" the plugin database? How can I > help? > > Best regards, > > -- > Filipe Cust?dio > Consultor Especialista em Seguran?a de SI > _______________________________________________ > openvas-plugins mailing list > openvas-plugins at openvas.org > http://www.openvas.org/mailman/listinfo.cgi/openvas-plugins Gomez: I have seen the unholy (\`--/') _ _______ .-r-. maggots which feast in the dark >.~.\ `` ` `,`,`. ,'_'~`. recesses of the human soul! (v_," ; `,-\ ; : ; \/,-~) \ Morticia: They're at camp. `--'_..),-/ ' ' '_.>-' )`.`.__.') stripes at tigerlair dot com ((,((,__..'~~~~~~((,__..' `-..-'fL From filipe.custodio at gmail.com Thu May 4 01:22:19 2006 From: filipe.custodio at gmail.com (=?iso-8859-1?Q?Filipe_Cust=F3dio?=) Date: Thu, 4 May 2006 00:22:19 +0100 Subject: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) In-Reply-To: <20060503191504.A41@tigerlair.com> Message-ID: <001301c66f08$6d2c2930$6c02a8c0@blackhat> Hello Anne, If you tell me how far you got and what your plans are, maybe we could share the workload. Best regards, Filipe -----Original Message----- From: stripes [mailto:stripes at tigerlair.com] Sent: quinta-feira, 4 de Maio de 2006 0:15 To: Filipe Custodio Cc: Subject: Re: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) Hi Filipe, Yes, I'm currently working on cleaning up the plugins; however, I have heard nothing but crickets from anyone else :( -Anne On Thu, May 04, 2006 at 12:03:28AM +0100, Filipe Custodio wrote: > Hi! > > Just got OpeVAS to do its first scan on my machine :-) > > I noticed some obsolete plugins are still included, like "gpl_feed.nasl", > which reports: > > You are running a version of Nessus which is not configured to receive > a full plugin feed. As a result, the security audit of the remote host > produced > incomplete results. > > To obtain a complete plugin feed, you need to register your Nessus scanner > at http://www.nessus.org/register/ then run nessus-update-plugins to get > the full list of Nessus plugins. > > Is there some effort going on to "cleanup" the plugin database? How can I > help? > > Best regards, > > -- > Filipe Cust?dio > Consultor Especialista em Seguran?a de SI > _______________________________________________ > openvas-plugins mailing list > openvas-plugins at openvas.org > http://www.openvas.org/mailman/listinfo.cgi/openvas-plugins Gomez: I have seen the unholy (\`--/') _ _______ .-r-. maggots which feast in the dark >.~.\ `` ` `,`,`. ,'_'~`. recesses of the human soul! (v_," ; `,-\ ; : ; \/,-~) \ Morticia: They're at camp. `--'_..),-/ ' ' '_.>-' )`.`.__.') stripes at tigerlair dot com ((,((,__..'~~~~~~((,__..' `-..-'fL -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.392 / Virus Database: 268.5.2/330 - Release Date: 03-05-2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.392 / Virus Database: 268.5.2/330 - Release Date: 03-05-2006 From stripes at tigerlair.com Thu May 4 01:21:43 2006 From: stripes at tigerlair.com (stripes) Date: Wed, 3 May 2006 19:21:43 -0400 Subject: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) In-Reply-To: <001301c66f08$6d2c2930$6c02a8c0@blackhat>; from filipe.custodio@gmail.com on Thu, May 04, 2006 at 12:22:19AM +0100 References: <20060503191504.A41@tigerlair.com> <001301c66f08$6d2c2930$6c02a8c0@blackhat> Message-ID: <20060503192143.B41@tigerlair.com> Absolutely. I'm currently fixing dependencies to GPL plugins, and right now, I'mcleaning up the mess of KB items. How about you? Nice to yer interested :) -Anne On Thu, May 04, 2006 at 12:22:19AM +0100, Filipe Cust?dio wrote: > Hello Anne, > > If you tell me how far you got and what your plans are, maybe we could share > the workload. > > Best regards, > > Filipe > > > -----Original Message----- > From: stripes [mailto:stripes at tigerlair.com] > Sent: quinta-feira, 4 de Maio de 2006 0:15 > To: Filipe Custodio > Cc: > Subject: Re: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) > > > Hi Filipe, > > Yes, I'm currently working on cleaning up the plugins; however, I have heard > nothing but crickets from anyone else :( > > -Anne > > On Thu, May 04, 2006 at 12:03:28AM +0100, Filipe Custodio wrote: > > Hi! > > > > Just got OpeVAS to do its first scan on my machine :-) > > > > I noticed some obsolete plugins are still included, like "gpl_feed.nasl", > > which reports: > > > > You are running a version of Nessus which is not configured to receive > > a full plugin feed. As a result, the security audit of the remote host > > produced > > incomplete results. > > > > To obtain a complete plugin feed, you need to register your Nessus > scanner > > at http://www.nessus.org/register/ then run nessus-update-plugins to get > > the full list of Nessus plugins. > > > > Is there some effort going on to "cleanup" the plugin database? How can I > > help? > > > > Best regards, > > > > -- > > Filipe Cust?dio > > Consultor Especialista em Seguran?a de SI > > > _______________________________________________ > > openvas-plugins mailing list > > openvas-plugins at openvas.org > > http://www.openvas.org/mailman/listinfo.cgi/openvas-plugins > > Gomez: I have seen the unholy (\`--/') _ _______ .-r-. > maggots which feast in the dark >.~.\ `` ` `,`,`. ,'_'~`. > recesses of the human soul! (v_," ; `,-\ ; : ; \/,-~) \ > Morticia: They're at camp. `--'_..),-/ ' ' '_.>-' )`.`.__.') > stripes at tigerlair dot com ((,((,__..'~~~~~~((,__..' `-..-'fL > -- > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.1.392 / Virus Database: 268.5.2/330 - Release Date: 03-05-2006 > > -- > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.1.392 / Virus Database: 268.5.2/330 - Release Date: 03-05-2006 > > > Gomez: I have seen the unholy (\`--/') _ _______ .-r-. maggots which feast in the dark >.~.\ `` ` `,`,`. ,'_'~`. recesses of the human soul! (v_," ; `,-\ ; : ; \/,-~) \ Morticia: They're at camp. `--'_..),-/ ' ' '_.>-' )`.`.__.') stripes at tigerlair dot com ((,((,__..'~~~~~~((,__..' `-..-'fL From filipe.custodio at gmail.com Thu May 4 20:02:37 2006 From: filipe.custodio at gmail.com (Filipe Custodio) Date: Thu, 4 May 2006 19:02:37 +0100 Subject: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) In-Reply-To: <20060503192143.B41@tigerlair.com> References: <20060503191504.A41@tigerlair.com> <001301c66f08$6d2c2930$6c02a8c0@blackhat> <20060503192143.B41@tigerlair.com> Message-ID: I'm starting to analyse the script dependencies. A quick look at the scripts yields the following results: TOP 20 Plugins, sorted by dependencies: ssh_get_info.nasl|1499 find_service.nes|571 http_version.nasl|513 no404.nasl|111 cross_site_scripting.nasl|82 httpver.nasl|52 global_settings.nasl|51 smb_hotfixes.nasl|42 www_fingerprinting_hmap.nasl|33 find_service2.nasl|32 ssh_detect.nasl|26 hydra_options.nasl|22 smtpserver_detect.nasl|22 doublecheck_std_services.nasl|21 find_service_3digits.nasl|18 ftpserver_detect_type_nd_version.nasl|18 ftp_anonymous.nasl|17 os_fingerprint.nasl|12 find_service1.nasl|11 phpgroupware_detect.nasl|10 I'd say these are the plugins that we should cleanup first, do you agree? Regards, Filipe On 5/4/06, stripes wrote: > > Absolutely. I'm currently fixing dependencies to GPL plugins, and right > now, I'mcleaning up the mess of KB items. > > How about you? Nice to yer interested :) > > -Anne > > On Thu, May 04, 2006 at 12:22:19AM +0100, Filipe Cust?dio wrote: > > Hello Anne, > > > > If you tell me how far you got and what your plans are, maybe we could > share > > the workload. > > > > Best regards, > > > > Filipe > > > > > > -----Original Message----- > > From: stripes [mailto:stripes at tigerlair.com] > > Sent: quinta-feira, 4 de Maio de 2006 0:15 > > To: Filipe Custodio > > Cc: > > Subject: Re: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) > > > > > > Hi Filipe, > > > > Yes, I'm currently working on cleaning up the plugins; however, I have > heard > > nothing but crickets from anyone else :( > > > > -Anne > > > > On Thu, May 04, 2006 at 12:03:28AM +0100, Filipe Custodio wrote: > > > Hi! > > > > > > Just got OpeVAS to do its first scan on my machine :-) > > > > > > I noticed some obsolete plugins are still included, like > "gpl_feed.nasl", > > > which reports: > > > > > > You are running a version of Nessus which is not configured to > receive > > > a full plugin feed. As a result, the security audit of the remote > host > > > produced > > > incomplete results. > > > > > > To obtain a complete plugin feed, you need to register your Nessus > > scanner > > > at http://www.nessus.org/register/ then run nessus-update-plugins to > get > > > the full list of Nessus plugins. > > > > > > Is there some effort going on to "cleanup" the plugin database? How > can I > > > help? > > > > > > Best regards, > > > > > > -- > > > Filipe Cust?dio > > > Consultor Especialista em Seguran?a de SI > > > > > _______________________________________________ > > > openvas-plugins mailing list > > > openvas-plugins at openvas.org > > > http://www.openvas.org/mailman/listinfo.cgi/openvas-plugins > > > > Gomez: I have seen the unholy (\`--/') _ _______ .-r-. > > maggots which feast in the dark >.~.\ `` ` `,`,`. ,'_'~`. > > recesses of the human soul! (v_," ; `,-\ ; : ; \/,-~) \ > > Morticia: They're at camp. `--'_..),-/ ' ' '_.>-' )`.`.__.') > > stripes at tigerlair dot com ((,((,__..'~~~~~~((,__..' `-..-'fL > > -- > > No virus found in this incoming message. > > Checked by AVG Free Edition. > > Version: 7.1.392 / Virus Database: 268.5.2/330 - Release Date: > 03-05-2006 > > > > -- > > No virus found in this outgoing message. > > Checked by AVG Free Edition. > > Version: 7.1.392 / Virus Database: 268.5.2/330 - Release Date: > 03-05-2006 > > > > > > > Gomez: I have seen the unholy (\`--/') _ _______ .-r-. > maggots which feast in the dark >.~.\ `` ` `,`,`. ,'_'~`. > recesses of the human soul! (v_," ; `,-\ ; : ; \/,-~) \ > Morticia: They're at camp. `--'_..),-/ ' ' '_.>-' )`.`.__.') > stripes at tigerlair dot com ((,((,__..'~~~~~~((,__..' `-..-'fL > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.wald.intevation.org/pipermail/openvas-plugins/attachments/20060504/d6334423/attachment.html From jan-oliver.wagner at intevation.de Thu May 4 12:58:24 2006 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Thu, 4 May 2006 12:58:24 +0200 Subject: [openvas-plugins] Obsolete plugins (gpl_feed.nasl) In-Reply-To: References: Message-ID: <200605041258.26230.jan-oliver.wagner@intevation.de> Am Donnerstag, 4. Mai 2006 01:03 schrieb Filipe Custodio: > Just got OpeVAS to do its first scan on my machine :-) nice to hear! However, you probably have seen quite a number of warnings and erros during compilation? Thi module is currently being revamped for clean compilation and a conflict-free installation parallel to nessus-plugins. This also includes quite some renaming. > I noticed some obsolete plugins are still included, like "gpl_feed.nasl", This surely is part of the revamping ;-) > Is there some effort going on to "cleanup" the plugin database? How can I > help? any help is very appreciated! Pesonally I am not in the actual plugins team, but others may give hints on how/where to procede. Best Jan -- Jan-Oliver Wagner: www.intevation.de/~jan | GISpatcher: www.gispatcher.de Kolab Konsortium : www.kolab-konsortium.de | Thuban : thuban.intevation.org Intevation GmbH : www.intevation.de | Kolab : www.kolab.org FreeGIS : www.freegis.org | GAV : www.grass-verein.de