Re: [Openvas-discuss] OpenVAS 8 - Wapiti and Arachni

2016-03-24 Thread Chris
Hi,

> Can someone tell me where to look to find what the plugins are trying to run 
> for a command line so I can debug what is failing?

you could have a look at the NASL Plugins for both scanners:

http://plugins.openvas.org/nasl.php?oid=80110
http://plugins.openvas.org/nasl.php?oid=110001

Adding a:

log_message(data:argv);

before the:

r = pread(cmd: arachni, argv: argv, cd: 1);

and

r = pread(cmd: cmdext, argv: argv, cd: 1);

in both NVTs could give you some debugging output about the used command
line in your GSA.

> Corresponding question  - is Arachni really supported?

Have a look at this mailinglist post:

https://lists.wald.intevation.org/pipermail/openvas-discuss/2014-December/007180.html

> If not - how to remove the attempt to use it?

You can disable the NVTs in your scan config within the "Web application
abuses" family.

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss


[Openvas-discuss] OpenVAS 8 - Wapiti and Arachni

2016-03-23 Thread Thane Hubbell
Good Day,

I’ve come a long way on this and I have dirb working and nikto but I can’t get 
Arachni nor Wapiti to function.

I’m using Ubuntu Server 14.

I can run both Arachni and Wapiti from the command line.

Can someone tell me where to look to find what the plugins are trying to run 
for a command line so I can debug what is failing?

Around the web and on the Arachni Git site they say that this plugin is old and 
not supported by Arachni but I also see where with OpenVAS 8 the plugin 
interface was changed.

So my specific question is - what are the command lines or how do I figure out 
the command lines being used?  I don’t think it’s a timeout issue as when I run 
from the command line the response comes quick.

Corresponding question  - is Arachni really supported?  If not - how to remove 
the attempt to use it?

The errors reported are:

arachni report filename is empty.  that could mean that wrong version of 
arachni is used or tmp dir is not accessible.  In short: check installation of 
arachni and OpenVAS

Same error for Wapiti.
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss