>> These we can support as builtin/native or as a script which will convert >> from native syntax to NASL (something like oval2nasl or nes2nasl...). >> Question of design and advantages/disadvantages of each solution. > I wonder whether it might make more sense to use nmap directly > and just integrate the .nse files in the OpenVAS feed , OpenVAS server > (just registering internally and reading base information) and therewith > bring the selection of .nse files into the OpenVAS Client.
I agree this is the most easiest way to do it. There is some problems regarding this and I plan to patch nmap for that for official inclusion. Most problematic one is that scripts check for some open port or service in order to run and we cannot pass the predefined set of ports. Take a look at this thread on nmap-dev: http://seclists.org/nmap-dev/2008/q3/0542.html Kost _______________________________________________ Openvas-devel mailing list Openvas-devel@wald.intevation.org http://lists.wald.intevation.org/mailman/listinfo/openvas-devel
