Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hostnames are not populated - xlsx and docx #3

Open
shall1569 opened this issue May 31, 2019 · 4 comments

Comments

Projects
None yet
2 participants
@shall1569
Copy link

commented May 31, 2019

Tried to go through some of the python code and figure out how the "Hostname" field was being populated.. but alas I am no expert

When exporting to xlsx, there is a Host name field on the vulnerability tabs.
This is just marked as "-"

Ask questions, and I will try and explain more if needed

@TheGroundZero

This comment has been minimized.

Copy link
Owner

commented May 31, 2019

Hi @shall1569

This tool is to set up a listener that can automated reports that are sent after finishing a scan.
The actual exporting to xlsx files is done through the OpenVAS Reporting package.

The code for creating the sheets for each discovered vulnerability can be found in export.py.
Line 337 is the one that fills the hostname cell. - is entered if the scan data did not include a hostname.

I copied the hostname part from cr0hn's Openvas2Report.
However, I think the scan data actually never includes a hostname, even if one is discovered by the scan, which I believe is an issue with OpenVAS' report exporting.

@shall1569

This comment has been minimized.

Copy link
Author

commented May 31, 2019

Hi @TheGroundZero

Thanks for your reply. I was unable to raise an issue directly on the OpenVAS Reporting package.
I have had a look at the XML output that Openvas gives you I can see that it lists the IP address.

When exporting to CSV it correctly fills in the IP address and the Hostname field.
I think this is an issue with OpenVas GSA not actually exporting the hostname as part of an xml export.

Is there any way we are able to use the CSV in your tool?

@TheGroundZero

This comment has been minimized.

Copy link
Owner

commented May 31, 2019

Currently the OpenVAS Reporting package/tool only supports importing XML and converting this to docx/xlsx/csv.

If you'd like to implement a CSV converter, you're free to create a pull request at the correct repo.

Should I find the time to do so myself, I may add this functionality later on.

EDIT: I've added you're idea to my TODO list

TheGroundZero added a commit to TheGroundZero/openvasreporting that referenced this issue May 31, 2019

@shall1569

This comment has been minimized.

Copy link
Author

commented May 31, 2019

@TheGroundZero

Not a problem at all. Issue is down to OpenVas itself and not the actual exporting functionality.
I will also post this on the OpenVas community to see if anyone has been able to generate xml reports that contain FQDN's

I appreciate your time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.