On Fri, Mar 28, 2003 at 04:58:11PM -0800, Aaron Frerichs wrote:
> What I'm wondering is if Nessus 1.2.7 supports nasl2?
No.
> New nasls for 2.0,
> how many of these are 2.0 specific, i.e. will not work w/ 1.2.7 and if so
> is there a way to check for these 2.0 specific nasls? I've compared the
> nasls that come w/ 1.2.x w/ nasls that come w/ 2.0 and they are exactly
> the same except of course that 2.0 has about 250 more. I'm just trying to
> cover my bases here because if I'm wrong then a lot of things are gonna
> break on my side.
nasl2 extends the language, so :
- There are new operators in nasl2 (>!<, =~, !~)
- There is a way better array/hashes management (make_list() and
foreach come to mind)
- There are handy new functions (get_kb_list(), crypto and more)
- It parses the code correctly. In NASL1, some constructions like :
if(a) b();
else if(c) d();
would not always work (depending on the indentation). In the same
vein, stuff like :
if(a = b())display("a = ", a, "\n");
would not necessarily work either.
If you want to benefit from the ~250 scripts that have been added in
Nessus 2.0 (which are for "older" flaws by the way - critical scripts
like WebDAV are backported), I really suggest you upgrade. Nessus 2.0.1
has been released over one month ago, and I've yet to receive any fatal
bug report for it (apart detached scans which don't work, but that's
fixed in the upcoming new version :). Nessus 2.0.2 will be released
really soon (this week-end), and while it fixes minor bugs, it's
primarily adds new functionnality. In the whole Nessus 2.0 is wayyy more
stable than 1.2.x has ever been.
-- Renaud
