libxml2-utils 2.9.10+dfsg-4 breaks searchsploit

[rafe-ai]

When updating libxml2-utils to its newest version 2.9.10+dfsg-4, searchsploit gets in trouble parsing xml files.

With version 2.9.4+dfsg1-8 installed, type:
searchsploit --nmap scan.xml -v
(using the scan.xml file attached to this bug report)
results for both Nostromo and OpenSSH are displayed.

Now upgrade the libxml2-utils package. Now only results are displayed for the first open port in the nmap xml file.

The output is also incorrect when omitting the -v flag.

I love searchsploit and use it a lot!
scan.xml.zip

[srikwit]

I found the issue, it is not because of libxml2-utils but in the nmapxml function nostromo gets tagged as a product. There is no echo command for the product case because of which it is not read into searchsploitout.

[rafe-ai]

Thanks for the response, but I'm not sure that's it. It's not about Nostromo, but about the fact that only the first entry in the nmap file is read. Here is another one, first entry is OpenSSH, second is Apache. After upgrade of the libxml2-utils package, searchsploit only checks for OpenSSH.

scansv.xml.zip

[srikwit]

Hi @rafe-ai my changes have not yer been pushed to this repository.
In my repo, the scansv file that you have shared is also parsed properly:

[rafe-ai]

A big thank you for the action, I appreciate it!

[g0tmi1k]

Yesterday the package for Kali got updated (was in the daily commit a few days ago).
This should fix this issue.

If you are still having issues, please re-open

---

## Update

g0tmi1k@kali-dev:~$ sudo apt update && sudo apt install -y exploitdb
...SNIP...
g0tmi1k@kali-dev:~$
g0tmi1k@kali-dev:~$ dpkg -l | grep exploitdb
ii  exploitdb                            20200408-0kali1                      all          Searchable Exploit Database archive
g0tmi1k@kali-dev:~$

... or do searchsploit --update

---

## Test 1

g0tmi1k@kali-dev:~$ wget https://github.com/offensive-security/exploitdb/files/4409184/scan.xml.zip
...SNIP...
g0tmi1k@kali-dev:~$ unzip scan.xml.zip 
...SNIP...
g0tmi1k@kali-dev:~$ searchsploit --nmap scan.xml -v
[i] Reading: 'scan.xml'

[-] Skipping term: ssh    (Term is too general. Please re-search manually: /usr/bin/searchsploit -t ssh )




[i] /usr/bin/searchsploit -t openssh 
-------------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
 Exploit Title                                                                                                                        |  Path
                                                                                                                                      | (/usr/share/exploitdb/)
-------------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
Debian OpenSSH - (Authenticated) Remote SELinux Privilege Escalation                                                                  | exploits/linux/remote/6094.txt
...SNIP...
[-] Skipping term: http    (Term is too general. Please re-search manually: /usr/bin/searchsploit -t http )




[i] /usr/bin/searchsploit -t nostromo 
-------------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
 Exploit Title                                                                                                                        |  Path
                                                                                                                                      | (/usr/share/exploitdb/)
-------------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
Nostromo - Directory Traversal Remote Command Execution (Metasploit)                                                                  | exploits/multiple/remote/47573.rb
...SNIP...
g0tmi1k@kali-dev:~$

---

Test 2

g0tmi1k@kali-dev:~$ wget https://github.com/offensive-security/exploitdb/files/4410245/scansv.xml.zip
...SNIP...
g0tmi1k@kali-dev:~$ 
g0tmi1k@kali-dev:~$ unzip scansv.xml.zip 
...SNIP...
g0tmi1k@kali-dev:~$ 
g0tmi1k@kali-dev:~$ searchsploit --nmap scansv.xml -v
[i] Reading: 'scansv.xml'

[-] Skipping term: ssh    (Term is too general. Please re-search manually: /usr/bin/searchsploit -t ssh )




[i] /usr/bin/searchsploit -t openssh 
-------------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
 Exploit Title                                                                                                                        |  Path
                                                                                                                                      | (/usr/share/exploitdb/)
-------------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
Debian OpenSSH - (Authenticated) Remote SELinux Privilege Escalation                                                                  | exploits/linux/remote/6094.txt
...SNIP...
[-] Skipping term: http    (Term is too general. Please re-search manually: /usr/bin/searchsploit -t http )




[-] Skipping term: apache    (Term is too general. Please re-search manually: /usr/bin/searchsploit -t apache )

[i] /usr/bin/searchsploit -t apache httpd 
-------------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
 Exploit Title                                                                                                                        |  Path
                                                                                                                                      | (/usr/share/exploitdb/)
-------------------------------------------------------------------------------------------------------------------------------------- ----------------------------------------
Apache 0.8.x/1.0.x / NCSA HTTPd 1.x - 'test-cgi' Directory Listing                                                                    | exploits/cgi/remote/20435.txt
...SNIP...
g0tmi1k@kali-dev:~$