Am 13.09.2014 um 11:26 schrieb Michael Meyer: > *** Reindl Harald wrote: >> >> Am 13.09.2014 um 09:43 schrieb Michael Meyer: >>>> Maybe I should look into another direction. Metasploit? >>> Yes, why not. Please take Harald with you. >> >> i love you too :-) > > :) > >>> Wrapping tools like dirb, w3af, ... make some problems and IMHO it >>> make no sense to run them through OpenVAS at the moment >> >> so *WHY* is it then done over years? > > At the beginning of OpenVAS people thought it's a good idea to add > NVTs for this tools. Now we know it doesn't work as expected and we > are working on a solution. Don't forget that the team behind OpenVAS > is small, so some things (especially the not so important ones) > takes time. You could send patches for this problem at any > time. We will apply them...
i don't get what is so hard by remve that NVT's until thea are ready to use? >>> However, Hani is working on a solution for tools like that... >> >> there where i work things are included after the solutions are >> done and not years before just to heat up the CPU and make >> a lot of noise in the webserver logs with never ever see a >> result > > Nobody forcing you to install the tools or to run the (wrapper)-NVTs surely, dependencies of packages do because packages thought "hey, upstream surely knwos what tey are doing and if they can use this and that external tool we add it to deps"
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
