Propose vulners.nse to official nmap repo.

[GMedian]

The proposed script is the latest stable release of vulnersCom/nmap-vulners github repo.

[vulnersCom]

Ping?

[vulnersCom]

That's https://github.com/vulnersCom/nmap-vulners this one NSE plugin

[cldrn]

What's the query limit per IP? I've looked into this before but at the time we had a working version of vulscan which does the same thing with a local database so we didnt have to deal with any privacy issues too. However, The script works as expected so besides the expected additional server load on the service which you obviously are OK with, it might be worth adding it as an external option or even merging into vulscan.nse El vie., 8 de jun. de 2018 9:26 a. m., Vulners Team < notifications@github.com> escribió:

…

Ping? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1126 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AALs7BW8lm3cjlKm_Bm3RXO8a7sh8VJnks5t6ol9gaJpZM4R23ib> .

[vulnersCom]

At the moment it's about 1000rps. No one user even gets close))
Has not figured performance issues yet. Caching and direct queries works fine.

Unfortunately no way to use local db, it's about 250gb in elastics and API works querying it on the fly.

What do you mean by "external option"?

[p-l-]

If I understand well, this script must also be categorized as "external".

[vulnersCom]

Got it.

[p-l-]

You probably want to mention here that it connects to a remote service.

[vulnersCom]

Definitely yes. Will refactor the description.

[GMedian]

@vulnersCom @cldrn @p-l-
Thank you for your time, I have updated the script to explicitly mention the remote API.

[vulnersCom]

Is it ok now?

[b4ldr]

message for the devs, the https://vulners.com/products web site explicitly mentions nmap scrips and the API seems to be free and open (https://vulners.com/docs) and all links from the main site point to the @vulnersCom github account so i think we think permission to use the API has been granted. anything else holding this up, it looks like a really nice addition?

[vulnersCom]

Hi fellows.
Anything we can do more?

[vulnersCom]

Gentle ping ^)

[ghost]

I use this script as a useful addition to the vuln category. I'd be nice for it to be in the main scripts.

[vulnersCom]

Hi devs! Any movements here?

[ghost]

Bump.

[ghost]

We use this script quite extensively in a large media company and it would be really nice if it was in the official scripts directory.

[ghost]

We use this script extensively and have built pretty printing, persistence and visualisation (which we will eventually open source). Can we please get this merged into the the nmap official scripts or is there something holding this back? Some users have a problem finding the scripts folder.

[vulnersCom]

Bump

[ghost]

Not sure if nmap needs a separate NSE chief maintainer and other lower down the chain. Some of those scripts are old, and this is where I see the innovation emerging. WDYT? @vulnersCom

This is that what we've got ATM with your Lua script:
https://giphy.com/gifs/lMs9EJ0386d5tKjjgo
https://giphy.com/gifs/YOGFYd0J4fFtvUZAf7

[dmiller-nmap]

@vulnersCom I'm working on getting this done with a few adjustments, but I can't seem to get any results. Every query is coming back with the following response:

HTTP/1.1 200 OK
Server: QRATOR
Date: Wed, 26 Jun 2019 03:46:45 GMT
Content-Type: application/json
Content-Length: 124
Connection: close
Vary: Accept-Encoding
X-Vulners-Ratelimit-Reqlimit: 300
X-Vulners-Ratelimit-Burstlimit: 50
X-Vulners-Ratelimit-Rate: 228.9639381797367
X-Vulners-View-Calltime: 60ms
X-Vulners-Calltime: 60ms
X-Vulners-Full-Calltime: 78ms
Set-Cookie: vulnersSession=6YYOKPTQAZNYK8MTROX1TITSZWILACFG0GC4LQOGQGLZ761ZI1ND62N72BQSVFBUT7GUE2MILYF1DDHKO784NJ3521BVHSKN7FWPSRCNBDWQ1ZCEUG6R0W2YT1VRZ00G:4q-_Xe2Kk2HzNAUT_dh88p73z9Q; Domain=.vulners.com; expires=Wed, 26 Jun 2019 03:46:55 GMT; HttpOnly; Max-Age=10; Path=/; Secure
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

{   
  "result": "warning",
  "data": {
    "warning": "Nothing found for Burpsuite search request",
    "errorCode": 401
  } 
}   

Is this expected? Is there a particular query (CPE, software name and version, etc.) that I could use to get a valid result for testing?

[vulnersCom]

@dmiller-nmap
Here we go. Test examples:

https://vulners.com/api/v3/burp/software/?type=cpe&software=cpe:/a:mongodb:mongodb&version=2.2
https://vulners.com/api/v3/burp/software/?type=cpe&software=cpe:/a:cybozu:garoon&version=4.2.1

There is always 200 reply if server side is OK. But differs in JSON "result" var.

[dmiller-nmap]

Committed in 2056ef9 with further changes:

• ba53053 - Whitespace and NSEdoc formatting
• 86d448e - Avoid excessive string concatenation
• 70f1cbb - Structured output
• a08be75 - Enable vulners.nse to work during IPv6 scans
• fbcaa39 - Document mincvss arg, ensure consistent ordering