Am Montag 11 Mai 2009 schrieb Jan-Oliver Wagner: > Hello, > > we have a couple of NVTs that wrap the tool "hydra" > (http://freeworld.thc.org/thc-hydra/). > > Besides from being slightly out of date, I realized that this tool isn't > Free Software. In fact is says its GNU GPL and has some additional clauses. > Those clauses prevent the "use for any purpose", basically its some limits > on commercial aspects. I checked back with the authors and was confirmed > that this is not but chance but rather by intention. > > (This explains also why hydra has been removed from Debian a while ago). > > I would have preferred even a tighter integration with hydra, because it is > light-weight and fast. > However, as things are, IMHO we have no other choice than to remove the > hydra NVTs as people might unintendingly violate the license of hydra. > > Any concerns or other comments? > > Best > > Jan
Hi Jan, this is indeed a pity! I suggest, to add thc-hydra as a module, so the user is able and can decide, to use or drop it to his purposes. If you do not include hydra into openvas directly, but as an optional addon, the user may install it (either self-compiled or as a package) or not. Doing so, there is no problem using hydra in openvas. Looking at the required NVT's, I suggest to add a NVT-repository "non-free" for those NVT's, as I think, the same problem will face us again, not only with hydra. Best regards Hans
_______________________________________________ Openvas-discuss mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
