Propose vulners.nse to official nmap repo. #1126

GMedian · 2018-02-02T08:57:15Z

The proposed script is the latest stable release of vulnersCom/nmap-vulners github repo.

vulnersCom · 2018-06-08T14:25:58Z

Ping?

vulnersCom · 2018-06-08T14:26:26Z

That's https://github.com/vulnersCom/nmap-vulners this one NSE plugin

cldrn · 2018-06-08T15:04:12Z

What's the query limit per IP? I've looked into this before but at the time we had a working version of vulscan which does the same thing with a local database so we didnt have to deal with any privacy issues too. However, The script works as expected so besides the expected additional server load on the service which you obviously are OK with, it might be worth adding it as an external option or even merging into vulscan.nse El vie., 8 de jun. de 2018 9:26 a. m., Vulners Team < notifications@github.com> escribió:

…

Ping? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1126 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AALs7BW8lm3cjlKm_Bm3RXO8a7sh8VJnks5t6ol9gaJpZM4R23ib> .

vulnersCom · 2018-06-08T15:12:21Z

At the moment it's about 1000rps. No one user even gets close))
Has not figured performance issues yet. Caching and direct queries works fine.

Unfortunately no way to use local db, it's about 250gb in elastics and API works querying it on the fly.

What do you mean by "external option"?

p-l- · 2018-06-08T15:35:58Z

scripts/vulners.nse

+
+author = 'gmedian AT vulners DOT com'
+license = "Same as Nmap--See https://nmap.org/book/man-legal.html"
+categories = {"vuln", "safe"}


If I understand well, this script must also be categorized as "external".

p-l- · 2018-06-08T15:37:38Z

scripts/vulners.nse

+Its work is pretty simple:
+- work only when some software version is identified for an open port
+- take all the known cpe for that software (from the standard nmap output)
+- ask whether some known vulns exist for that cpe


You probably want to mention here that it connects to a remote service.

Definitely yes. Will refactor the description.

Slightly change the description to explicitly mention the usage of the remote service. Add the script to the "external" category.

GMedian · 2018-06-09T09:01:41Z

@vulnersCom @cldrn @p-l-
Thank you for your time, I have updated the script to explicitly mention the remote API.

vulnersCom · 2018-06-13T07:51:38Z

Is it ok now?

b4ldr · 2018-06-13T10:12:45Z

message for the devs, the https://vulners.com/products web site explicitly mentions nmap scrips and the API seems to be free and open (https://vulners.com/docs) and all links from the main site point to the @vulnersCom github account so i think we think permission to use the API has been granted. anything else holding this up, it looks like a really nice addition?

vulnersCom · 2018-07-02T07:43:09Z

Hi fellows.
Anything we can do more?

vulnersCom · 2018-08-02T12:19:11Z

Gentle ping ^)

ghost · 2019-01-10T13:39:53Z

I use this script as a useful addition to the vuln category. I'd be nice for it to be in the main scripts.

vulnersCom · 2019-02-15T07:33:12Z

Hi devs! Any movements here?

ghost · 2019-02-15T08:42:33Z

Bump.

ghost · 2019-05-23T09:26:48Z

We use this script quite extensively in a large media company and it would be really nice if it was in the official scripts directory.

ghost · 2019-06-25T10:15:13Z

We use this script extensively and have built pretty printing, persistence and visualisation (which we will eventually open source). Can we please get this merged into the the nmap official scripts or is there something holding this back? Some users have a problem finding the scripts folder.

vulnersCom · 2019-06-25T10:20:51Z

Bump

ghost · 2019-06-25T13:47:41Z

Not sure if nmap needs a separate NSE chief maintainer and other lower down the chain. Some of those scripts are old, and this is where I see the innovation emerging. WDYT? @vulnersCom

This is that what we've got ATM with your Lua script:
https://giphy.com/gifs/lMs9EJ0386d5tKjjgo
https://giphy.com/gifs/YOGFYd0J4fFtvUZAf7

dmiller-nmap · 2019-06-26T03:58:20Z

@vulnersCom I'm working on getting this done with a few adjustments, but I can't seem to get any results. Every query is coming back with the following response:

HTTP/1.1 200 OK
Server: QRATOR
Date: Wed, 26 Jun 2019 03:46:45 GMT
Content-Type: application/json
Content-Length: 124
Connection: close
Vary: Accept-Encoding
X-Vulners-Ratelimit-Reqlimit: 300
X-Vulners-Ratelimit-Burstlimit: 50
X-Vulners-Ratelimit-Rate: 228.9639381797367
X-Vulners-View-Calltime: 60ms
X-Vulners-Calltime: 60ms
X-Vulners-Full-Calltime: 78ms
Set-Cookie: vulnersSession=6YYOKPTQAZNYK8MTROX1TITSZWILACFG0GC4LQOGQGLZ761ZI1ND62N72BQSVFBUT7GUE2MILYF1DDHKO784NJ3521BVHSKN7FWPSRCNBDWQ1ZCEUG6R0W2YT1VRZ00G:4q-_Xe2Kk2HzNAUT_dh88p73z9Q; Domain=.vulners.com; expires=Wed, 26 Jun 2019 03:46:55 GMT; HttpOnly; Max-Age=10; Path=/; Secure
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

{   
  "result": "warning",
  "data": {
    "warning": "Nothing found for Burpsuite search request",
    "errorCode": 401
  } 
}

Is this expected? Is there a particular query (CPE, software name and version, etc.) that I could use to get a valid result for testing?

vulnersCom · 2019-06-26T06:43:35Z

@dmiller-nmap
Here we go. Test examples:

https://vulners.com/api/v3/burp/software/?type=cpe&software=cpe:/a:mongodb:mongodb&version=2.2
https://vulners.com/api/v3/burp/software/?type=cpe&software=cpe:/a:cybozu:garoon&version=4.2.1

There is always 200 reply if server side is OK. But differs in JSON "result" var.

dmiller-nmap · 2019-06-26T17:37:48Z

Committed in 2056ef9 with further changes:

ba53053 - Whitespace and NSEdoc formatting
86d448e - Avoid excessive string concatenation
70f1cbb - Structured output
a08be75 - Enable vulners.nse to work during IPv6 scans
fbcaa39 - Document mincvss arg, ensure consistent ordering

Propose vulners.nse to official nmap repo.

4c3b3a4

The proposed script is the latest stable release of vulnersCom/nmap-vulners github repo.

p-l- reviewed Jun 8, 2018

View reviewed changes

Update vulners.nse

271a2b5

Slightly change the description to explicitly mention the usage of the remote service. Add the script to the "external" category.

dmiller-nmap closed this Jun 26, 2019

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Propose vulners.nse to official nmap repo. #1126

Propose vulners.nse to official nmap repo. #1126

GMedian commented Feb 2, 2018

vulnersCom commented Jun 8, 2018

vulnersCom commented Jun 8, 2018

cldrn commented Jun 8, 2018 via email

vulnersCom commented Jun 8, 2018

p-l- Jun 8, 2018

vulnersCom Jun 8, 2018

p-l- Jun 8, 2018

vulnersCom Jun 8, 2018

GMedian commented Jun 9, 2018

vulnersCom commented Jun 13, 2018

b4ldr commented Jun 13, 2018

vulnersCom commented Jul 2, 2018

vulnersCom commented Aug 2, 2018

ghost commented Jan 10, 2019

vulnersCom commented Feb 15, 2019

ghost commented Feb 15, 2019

ghost commented May 23, 2019

ghost commented Jun 25, 2019

vulnersCom commented Jun 25, 2019

ghost commented Jun 25, 2019 •

edited by ghost

dmiller-nmap commented Jun 26, 2019

vulnersCom commented Jun 26, 2019

dmiller-nmap commented Jun 26, 2019

Propose vulners.nse to official nmap repo. #1126

Propose vulners.nse to official nmap repo. #1126

Conversation

GMedian commented Feb 2, 2018

vulnersCom commented Jun 8, 2018

vulnersCom commented Jun 8, 2018

cldrn commented Jun 8, 2018 via email

vulnersCom commented Jun 8, 2018

p-l- Jun 8, 2018

Choose a reason for hiding this comment

vulnersCom Jun 8, 2018

Choose a reason for hiding this comment

p-l- Jun 8, 2018

Choose a reason for hiding this comment

vulnersCom Jun 8, 2018

Choose a reason for hiding this comment

GMedian commented Jun 9, 2018

vulnersCom commented Jun 13, 2018

b4ldr commented Jun 13, 2018

vulnersCom commented Jul 2, 2018

vulnersCom commented Aug 2, 2018

ghost commented Jan 10, 2019

vulnersCom commented Feb 15, 2019

ghost commented Feb 15, 2019

ghost commented May 23, 2019

ghost commented Jun 25, 2019

vulnersCom commented Jun 25, 2019

ghost commented Jun 25, 2019 • edited by ghost

dmiller-nmap commented Jun 26, 2019

vulnersCom commented Jun 26, 2019

dmiller-nmap commented Jun 26, 2019

ghost commented Jun 25, 2019 •

edited by ghost