Hi,

even if the banner of an Apache webserver is only showing:

Server: Apache

the plugins phpinfo.nasl and apache_server_info.nasl could
detect further informations about the server.

The phpinfo for example contains additional infos like:

PHP Version 5.4.16
SSL_VERSION_INTERFACE   mod_ssl/2.4.4
SSL_VERSION_LIBRARY     OpenSSL/1.0.1e
_SERVER["SSL_VERSION_INTERFACE"]        mod_ssl/2.4.4
_SERVER["SSL_VERSION_LIBRARY"]  OpenSSL/1.0.1e

and the server-info infos like:

Server Version: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8g

I think it could be useful to run both plugins directly after
the apache / php version detection and extend both NVTs to
extract that infos and set it into the KB so the following
plugins depending on the apache / php version could also use
those infos.

As i'm not really familiar with NVT developing maybe a more
experienced user could have a look at this? If not i could
do my first steps in NVT developing but then i could need
some guidance how and in which NVT implement something like
this.

Thanks in advance

Chris
_______________________________________________
Openvas-plugins mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins

Reply via email to