[Openvas-discuss] Problem with slow scanns with ICMP scanning disabled

2016-09-07 Thread Allyn Baskerville
I'm trying to scan 6 hosts, and two of these hosts do not permit ICMP to them. Scanning the other 4 hosts would complete within 2 hours, but the two hosts that blocked ICMP were not scanned at all. I cloned the Full and Fast scan configuration, and the only thing I changed was "Mark unreachable as

[Openvas-discuss] Multiple Tasks Not Running At Same Time

2016-09-07 Thread Turner,Jonas
Just me again. :) So I started a few tasks to see how they would behave on the server, but it looks as if the other tasks are waiting for the first one to finish. The first task has 1520 IP's being scanned. Is there a reason why the other tasks wouldn't scan as well at the same time?

Re: [Openvas-discuss] PHP not detected

2016-09-07 Thread Christian Fischer
Hi, On 09/07/2016 05:02 PM, Jiri K. wrote: > the "Directories used for CGI Scanning" NVT does not detect that folder, > but it's easy to add it manually in the Scan Config, so it would solve > the problem for me if the PHP detection NVT tried calls on the CGI > directories as well. yes that

Re: [Openvas-discuss] PHP not detected

2016-09-07 Thread Jiri K.
Hi, the "Directories used for CGI Scanning" NVT does not detect that folder, but it's easy to add it manually in the Scan Config, so it would solve the problem for me if the PHP detection NVT tried calls on the CGI directories as well. I also noticed, that when I do the "GET / HTTP/1.0" command,

[Openvas-discuss] Alert: Targets In Email

2016-09-07 Thread Turner,Jonas
Is there way to add the "targets" that are being scanned to the email alert that is sent out when the scan is 'requested'? ___ Openvas-discuss mailing list Openvas-discuss@wald.intevation.org

Re: [Openvas-discuss] PHP not detected

2016-09-07 Thread Christian Fischer
Hi, On 09/07/2016 03:42 PM, Jiri K. wrote: > I'm not sure how the php detection works, but I tried telnet and "GET > / HTTP/1.0" and I noticed, that the returned header doesn't contain > PHP version unless I do "GET /appfolder/ HTTP/1.0", could this be the > reason why OpenVAS doesn't detect PHP

Re: [Openvas-discuss] PHP not detected

2016-09-07 Thread Brandon Perry
You should be performing authenticated scans to detect these things, not unauthenticated external scans based on HTTP headers. > On Sep 7, 2016, at 8:42 AM, Jiri K. wrote: > > Hello everyone, > > I did a Full & Fast scan of our server which is running Apache and PHP >

[Openvas-discuss] PHP not detected

2016-09-07 Thread Jiri K.
Hello everyone, I did a Full & Fast scan of our server which is running Apache and PHP 5.3.3, but OpenVAS (v8) couldn't detect that there was a PHP installed and didn't report any vulnerabilities (afaik there are several vulnerabilities in PHP 5.3.3). I'm not sure how the php detection works,

Re: [Openvas-discuss] OpenVAS - Unstable

2016-09-07 Thread Michael Meyer
*** Turner,Jonas wrote: > Hey!! It might have worked!! Do I have to uncomment those saves later or > just leave them alone for now? You have to let them commented out. See the example a https://svn.wald.intevation.org/svn/openvas/trunk/openvas-scanner/doc/example_redis_2_6.conf.in Micha --

Re: [Openvas-discuss] OpenVAS - Unstable

2016-09-07 Thread Turner,Jonas
I actually did!! After I made the changes Michael mentioned, I was able to rebuild it and it started the scan off like it normally does!! I definitely copied your link of notes and his link of notes!! I will definitely keep those as those are lifesavers at this point!! :D Thanks again you

Re: [Openvas-discuss] [Openvas-announce] New release for OpenVAS-8

2016-09-07 Thread Sebastien Aucouturier
Friends, Take care that openvas-manager 6.0.9 need a minimun openvas-librairie 8.0.8 because of a change in credentials_t structure introduce in 8.0.8 CMakeLists.txt only ask for a openvas-librairie 8.0.5 Seb ___ Openvas-discuss mailing list

Re: [Openvas-discuss] OpenVAS - Unstable

2016-09-07 Thread Fábio Fernandes
Now i recall i had the same problem as you and i solved it by erasing openvassd redis database but i don’t remember the commands but i think Meyer solution does the same thing but it erases all databases i think. Did you get the scans to work? Fabio > No dia 06/09/2016, às 19:13, Turner,Jonas

[Openvas-discuss] Alert tag options

2016-09-07 Thread TN TN
Hi all, is there a way to display the task_id in the Alert message. i know you can do a $n to display the task name, but how can I display the task ID? Is there a '$' option for that? Thanks ___ Openvas-discuss mailing list