Hello Goran,
Few comments I had,
1. cisco_ids_manager.nasl
- Currently we are following 1.0 format for script_version
- A separate KB item for "Cisco IDS manager" will be good to have apart from
embedded KB
- The message in log_message, "port" variable can be used instead of 443
- All detection scripts, we consider "Risk factor" to "Informational"
- Since the script is reporting the "desc" in security_note after the Cisco
IDS Manager is detected, the description should be changed from,
"Detects if CISCO IDS Manager is running..." to "CISCO IDS Manager is
running..."
2. rsync_modules
- "Risk factor" can be "Informational"
- Version to 1.0 format
3. www_too_long_url.nasl
- Version to 1.0 format
- When http_send_recv(port:port, data:crap(65501)); is used, the "data"
contains the entire HTTP request content and not the URL alone. If we are
testing only for URL to be long, this can be used,
request = string("/", crap(65535));
request = http_get(item:request, port:port);
Thanks,
Chandra.
________________________________________
From: [email protected]
[mailto:[email protected]] On Behalf Of Goran
Licina
Sent: Tuesday, June 16, 2009 5:20 PM
To: [email protected]
Subject: Re: [Openvas-plugins] Working on missing dependencies
Hello!
Plugins are finished (in attachment). Please review them and let us know if
everything is done right.
Best Regards,
Goran Licina
--
Laboratory for Systems and Signals
Department of Electronic Systems and Information Processing
Faculty of Electrical Engineering and Computing
University of Zagreb
From: [email protected]
[mailto:[email protected]] On Behalf Of Goran
Ličina
Sent: Tuesday, May 26, 2009 1:09 PM
To: [email protected]
Subject: [Openvas-plugins] Working on missing dependencies
Hi,
we would like to start working on the following plugins:
www_too_long_url.nasl
cisco_ids_manager_detect.nasl
rsync_modules.nasl
Please, notify us if someone else is working on these.
Also, is it possible to maintain centralized list of missing dependencies
somewhere (perhaps on SVN)?
Regards,
Goran Licina
--
Laboratory for Systems and Signals
Department of Electronic Systems and Information Processing
Faculty of Electrical Engineering and Computing
University of Zagreb
_______________________________________________
Openvas-plugins mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
