full-disclosure - Automated Vulnerability Scanners

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <43FF789C.7000903@csuohio.edu>
Date: Fri Feb 24 21:20:45 2006
From: michael.holstein at csuohio.edu (Michael Holstein)
Subject: Automated Vulnerability Scanners

> Can anyone reccommend a perl based nessus wrapper that has the ability
> to dump results into a mysql database?

Heck with it .. I'm sure somebody will find my script and this useful.
Any SQL wizzards feel free to let me know how to optimize this ...

The 'nessusstats' part isn't needed for just storing the results -- 
that's so I can generate reports efficiently). There are other bits in 
there for other parts of this system I cobbled together -- like tables 
that store nmap results and such -- thus you see entries in some tables 
for stuff like that. Remove what you don't need.

Cheers,

Michael Holstein CISSP GCIA
Cleveland State University

CREATE TABLE ipmain (
   idmain int(10) unsigned NOT NULL auto_increment,
   mainip int(10) unsigned NOT NULL default '0',
   lastnmap datetime NOT NULL default '0000-00-00 00:00:00',
   lastnessus datetime NOT NULL default '0000-00-00 00:00:00',
   ipowner varchar(40) default NULL,
   PRIMARY KEY  (idmain),
   KEY xip (mainip)
) TYPE=MyISAM;

CREATE TABLE nessusresults (
   idnessus int(10) unsigned NOT NULL auto_increment,
   domain varchar(15) NOT NULL default '',
   nessushost int(10) unsigned NOT NULL default '0',
   service varchar(40) NOT NULL default '',
   scriptid int(10) unsigned NOT NULL default '0',
   risk tinyint(3) unsigned NOT NULL default '0',
   timestamp datetime NOT NULL default '0000-00-00 00:00:00',
   msg text,
   PRIMARY KEY  (idnessus),
   KEY xidnessus (idnessus),
   KEY knessushost (nessushost),
   KEY knessushost2 (nessushost,service)
) TYPE=MyISAM;

CREATE TABLE nessusstats (
   idstat int(10) unsigned NOT NULL auto_increment,
   domain varchar(15) NOT NULL default '',
   nessushost int(10) unsigned NOT NULL default '0',
   service varchar(40) NOT NULL default '',
   scriptid int(10) unsigned NOT NULL default '0',
   risk tinyint(3) unsigned NOT NULL default '0',
   timestamp datetime NOT NULL default '0000-00-00 00:00:00',
   PRIMARY KEY  (idstat),
   KEY xidstat (idstat),
   KEY kstat (nessushost),
   KEY kstst2 (nessushost,service)
) TYPE=MyISAM;