If that is the case, then I should look into what has broken in the openvas 
report importer.

Let me know if it fails, I will fix it.

Sent from a computer

> On Jul 2, 2014, at 6:30 AM, "Geoff Galitz" <[email protected]> wrote:
> 
> 
> Were you able to import the results of the scan back into MSF for the
> exploit follow-up?  That was the portion that was broken.
> 
> -G
> 
> 
> 
> 
>> It's works!
>> 
>> Debian Style
>> 
>> Step 1
>> 
>> OpenVAS
>> ===========
>> openvassd
>> openvasmd --rebuild
>> openvasmd -p 9390 -a 127.0.0.1
>> openvasad -a 127.0.0.1 -p 9393
>> gsad --http-only --listen=127.0.0.1 -p 9392
>> 
>> Step 2
>> 
>> Metasploit
>> ===========
>> ./msfconsole
>> load openvas
>> openvas_connect admin admin 127.0.0.1 9390
>> 
>> msf > openvas_   [TAB]
>> openvas_config_list           openvas_report_import
>> openvas_task_pause
>> openvas_connect               openvas_report_list
>> openvas_task_resume
>> openvas_debug                 openvas_target_create
>> openvas_task_resume_or_start
>> openvas_disconnect            openvas_target_delete
>> openvas_task_start
>> openvas_format_list           openvas_target_list
>> openvas_task_stop
>> openvas_help                  openvas_task_create
>> openvas_version
>> openvas_report_delete         openvas_task_delete
>> openvas_report_download       openvas_task_list
>> 
>> msf > openvas_config_list
>> [+] OpenVAS list of configs
>> 
>> ID  Name
>> --  ----
>> 0   empty
>> 1   Full and fast
>> 2   Full and fast ultimate
>> 3   Full and very deep
>> 4   Full and very deep ultimate
>> 
>> msf > openvas_target_create
>> [*] Usage: openvas_target_create <name> <hosts> <comment>
>> 
>> openvas_target_create example-blog example-blog.com blog
>> 
>> msf > openvas_target_create example-blog example-blog.com blog
>> [*] OK, resource created: b2c57f77-7d1d-4f2a-a1f4-dad26cd2c9ed
>> [+] OpenVAS list of targets
>> 
>> ID  Name        Hosts                     Max Hosts  In Use  Comment
>> --  ----        -----                     ---------  ------  -------
>> 0   example-blog  example-blog.com  1          0       blog
>> 1   Localhost   localhost                 1          0
>> 
>> msf > openvas_task_create
>> [*] Usage: openvas_task_create <name> <comment> <config_id> <target_id>
>> 
>> openvas_task_create example-blog blog 1 1
>> 
>> msf > openvas_task_create example-blog blog 1 1
>> [*] OK, resource created: 26294003-eb5d-4ba4-bc47-03a50737a046
>> [+] OpenVAS list of tasks
>> 
>> ID  Name        Comment  Status  Progress
>> --  ----        -------  ------  --------
>> 0   example-blog  blog     New     -1
>> 
>> msf > openvas_task_start 0
>> [*] OK, request submitted
>> 
>> msf > openvas_task_list
>> [+] OpenVAS list of tasks
>> 
>> ID  Name        Comment  Status   Progress
>> --  ----        -------  ------   --------
>> 0   example-blog  blog     Running  1
>> 
>> msf > openvas_task_list
>> [+] OpenVAS list of tasks
>> 
>> ID  Name        Comment  Status   Progress
>> --  ----        -------  ------   --------
>> 0   example-blog  blog     Running  8
>> 
>> msf > openvas_task_list
>> [+] OpenVAS list of tasks
>> 
>> ID  Name        Comment  Status   Progress
>> --  ----        -------  ------   --------
>> 0   example-blog  blog     Running  42
>> 
>> msf > openvas_task_list
>> [+] OpenVAS list of tasks
>> 
>> ID  Name        Comment  Status   Progress
>> --  ----        -------  ------   --------
>> 0   example-blog  blog     Running  98
>> 
>> msf > openvas_task_list
>> [+] OpenVAS list of tasks
>> 
>> ID  Name        Comment  Status  Progress
>> --  ----        -------  ------  --------
>> 0   example-blog  blog     Done    -1
>> 
>> 
>> I have not had time to do a post with details on my blog.
>> 
>> @firebitsbr
>> 
>> 
>> 
>> 2014-06-28 16:03 GMT-03:00 Mauro Risonho de Paula Assumpção <
>> [email protected]>:
>> 
>>> Hi, my friends!
>>> 
>>> Enable to successfully make a bridge connection between OpenVAS and
>>> Metasploit 6 2014062501 (
>>> https://github.com/rapid7/metasploit-framework/releases/tag/2014062501)
>>> !
>>> 
>>> I'm doing one post on my blog (https://firebitsbr.wordpress.com) about
>>> it
>>> ...
>>> 
>>> PUTZ! GOOOOOOLLLLLLLLLL OF BRAZIL!
>>> 
>>> GO BRAZIL!!
>>> 
>>> PS: I'm watching the World Cup Brazil goal and making me doing this post
>>> for
>>> you! :)
>>> 
>>> @firebitsbr
>>> 
>>> 
>>> 2014-06-25 7:55 GMT-03:00 Mauro Risonho de Paula Assumpção <
>>> [email protected]>:
>>> 
>>> 
>>>> 
>>>> http://averagesecurityguy.info/2011/10/10/openvas-and-metasploit-integeration/
>>>> 
>>>> @firebitsbr
>>>> 
>>>> 
>>>> 2014-06-25 2:33 GMT-03:00 Geoff Galitz <[email protected]>:
>>>> 
>>>> 
>>>>> 
>>>>> I'll go back and look at my notes.
>>>>> 
>>>>> -G
>>>>> 
>>>>> 
>>>>>> Do you know what broke exactly? I wrote the openvas report parser.
>>>>> If
>>>>> it
>>>>>> is
>>>>>> broken, I such fix it. :P
>>>>>> 
>>>>> 
>>>>> ------------------------------
>>>>> Geoff Galitz
>>>>> http://www.galitz.org
>>>>> 
>>>>> _______________________________________________
>>>>> Openvas-discuss mailing list
>>>>> [email protected]
>>>>> 
>>>>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>>>>> 
>>>> 
>>>> 
>>> 
>> 
> 
> 
> ------------------------------
> Geoff Galitz
> http://www.galitz.org
> 
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to