Hi,
using http_func.inc and http_version.nasl checked out of CVS today with
Nessus 2.2.6, I'm finding that saved kb files do not include the key
www/banner/80=... as I would expect them to, even though the server is
clearly is sending a banner.
While trying to debug this with a test nasl as follows:
include("http_func.inc");
port = get_http_port(default:80);
if(get_port_state(port))
{
banner = get_http_banner(port: port);
security_hole(port:port, data:"---banner
start---\n"+banner+"---banner end---");
set_kb_item(name:"www/set/"+port, value:banner);
replace_kb_item(name:"www/replaced/"+port, value:banner);
exit(0);
}
...the function get_http_banner is returning the complete header
correctly as its return value, and the item www/set/80 is saved also.
However www/replaced (which did not exist previously) is not saved in
the kb file.
Looking at the code in http_func.inc and http_version.nasl, it seems
that only replace_kb_item is ever used to set it, if the function
exists. Could this be the reason that the banner is never being saved to
the KB? Is this a bug or is it intentional?...
--
Hubert Seiwert
Internet Security Specialist, Westpoint Ltd
Albion Wharf, 19 Albion Street, Manchester M1 5LN, United Kingdom
Web: www.westpoint.ltd.uk
Tel: +44-161-2371028
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
