[Openvas-discuss] Sorry guys, I am leaving.

2011-11-08 Thread ArkanoiD
Just compared with nessus professional feed on the similar RHEL-dominated setup. OpenVAS: 20 high severity and 47 medium severity FPs on the report Nessus: ZERO. OpenVAS: No FPs were overriden by local checks, OpenVAS relies on banner info completely Nessus: All backported security fixes were

[Openvas-discuss] Disable all plugins with OMP

2011-11-08 Thread Allon Moritz - First Security
Hello How can I disable all plugins of a family where individual plugins are selected by not iterating over all plugins and disable them? For example when I copy the Full and fast scan config the Web application abuses family has one plugin not selected. My OMP command looks like this to disable

Re: [Openvas-discuss] Disable all plugins with OMP

2011-11-08 Thread Allon Moritz - First Security
Never mind I found it modify_config config_id=254cd3ef-bbe1-4d58-859d-21b8d0c046c6nvt_selectionfamilyWeb application abuses/family/nvt_selection/modify_config Von: openvas-discuss-boun...@wald.intevation.org [mailto:openvas-discuss-boun...@wald.intevation.org] Im Auftrag von Allon Moritz -

Re: [Openvas-discuss] Sorry guys, I am leaving.

2011-11-08 Thread Michael Meyer
*** ArkanoiD a...@eltex.net wrote: OpenVAS: 20 high severity and 47 medium severity FPs on the report Do you have a list of these FPs? Please send it to this list. OpenVAS relies on banner info completely No... it is pretty stupid to assume if the web server has no vendor string it is

Re: [Openvas-discuss] Sorry guys, I am leaving.

2011-11-08 Thread ArkanoiD
On Tue, Nov 08, 2011 at 11:37:40AM +0100, Michael Meyer wrote: *** ArkanoiD a...@eltex.net wrote: OpenVAS: 20 high severity and 47 medium severity FPs on the report Do you have a list of these FPs? Please send it to this list. 1.3.6.1.4.1.25623.1.0.100458 1.3.6.1.4.1.25623.1.0.100362

Re: [Openvas-discuss] Sorry guys, I am leaving.

2011-11-08 Thread Michael Meyer
*** ArkanoiD a...@eltex.net wrote: On Tue, Nov 08, 2011 at 11:37:40AM +0100, Michael Meyer wrote: Do you have a list of these FPs? Please send it to this list. 1.3.6.1.4.1.25623.1.0.100458 1.3.6.1.4.1.25623.1.0.100362 1.3.6.1.4.1.25623.1.0.900842 1.3.6.1.4.1.25623.1.0.900499

Re: [Openvas-discuss] Sorry guys, I am leaving.

2011-11-08 Thread ArkanoiD
Really? I cannot believe I am the first to report it. Ok, then I will spend some time chasing NVT bugs. But are there any tricks to improve performance? If you don't tell us _all_ NVTs which are producing FPs, we can't fix them. ___

Re: [Openvas-discuss] Sorry guys, I am leaving.

2011-11-08 Thread Henri Doreau
Hello, 2011/11/8 ArkanoiD a...@eltex.net: But are there any tricks to improve performance? There are several ones, depending on you environment and scan profile. If you are scanning a large IP range, you can for instance use the network_scan setting and the nmap_net NVT family. It is still

Re: [Openvas-discuss] (no subject)

2011-11-08 Thread Matthew Mundell
openvas-glib2-2.22.5-1.el5.art Oh you're using the Atomic repository. That should work. Could you post to openvas-distro so the maintainer can see? Else you can ask on IRC, he's normally around. http://openvas.org/online-chat.html -- Greenbone Networks GmbH Neuer Graben 17, 49074

[Openvas-discuss] Openvas-check-setup

2011-11-08 Thread Randy Dover
This is in regards to the openvas-check-setup tool. The instructions say: to use this tool simply follow these three steps: 1. Download the latest version of openvas-check-setup http://wald.intevation.org/plugins/scmsvn/viewcvs.php/*checkout*/trunk/ tools/openvas-check-setup?root=openvas .

Re: [Openvas-discuss] Openvas-check-setup

2011-11-08 Thread Brian Clark
You could download the tool using wget, with a command line like wget http://wald.intevation.org/plugins/scmsvn/viewcvs.php/*checkout*/trunk/tools /openvas-check-setup?root=openvas Or you could download it to your desktop and SFTP it over to your OpenSUSE server. Brian From:

[Openvas-discuss] Openvas-check-setup results

2011-11-08 Thread Randy Dover
OK, thanks to Pete, I have run the openvas-check-setup I got an error that xsltproc is not installed. I got an error that pdflatex is not installed. I got an error that makensis is not installed. I also got errors that OpenVAS Scanner, OpenVAS Manager, OpenVAS Administrator and Greenbone

Re: [Openvas-discuss] Creating a lot of targets

2011-11-08 Thread Juan José Pavlik Salles
I guess i am. I also tried passing the user and password parameters in the script with -u and -w, but there's no difference, still getting Failed to read response. El 8 de noviembre de 2011 22:27, Brandon Perry bperry.volat...@gmail.comescribió: Are you authenticating properly with openvassmd?

Re: [Openvas-discuss] Creating a lot of targets

2011-11-08 Thread Brandon Perry
is openvasmd listening on the correct IP Address/Port? (using the -a argument) 2011/11/8 Juan José Pavlik Salles jjpav...@gmail.com: I guess i am. I also tried passing the user and password parameters in the script with -u and -w, but there's no difference, still getting Failed to read

Re: [Openvas-discuss] Creating a lot of targets

2011-11-08 Thread Juan José Pavlik Salles
This is the context: * root@openvas:~/pruebas# netstat -natp|grep openvas tcp0 0 127.0.0.1:9390 0.0.0.0:* ESCUCHAR1665/openvasmd tcp0 0 127.0.0.1:9391 0.0.0.0:* ESCUCHAR12661/openvassd: wa tcp0 0 127.0.0.1:9393 0.0.0.0:*

Re: [Openvas-discuss] Creating a lot of targets

2011-11-08 Thread Brandon Perry
Also, omp -X $cadena 2011/11/8 Brandon Perry bperry.volat...@gmail.com:        cadena='create_targetnameWebserver $counter/namehosts$i/hosts/create_target' should be (I think)        cadena=create_targetnameWebserver $counter/namehosts$i/hosts/create_target Here is some (albeit C#) code