Re: [Plugins-writers] recv_line From ssh?

From: Jack Polimer (packetjack@private)
Date: Wed Apr 07 2004 - 01:39:31 PDT

  • Next message: Michel Arboi: "Re: [Plugins-writers] recv_line From ssh?"

    --- Michel Arboi <mikhail@private> wrote:
    > Jack Polimer <packetjack@private> writes:
    > 
    > > I want to create a check for ssh, but I don't
    > think it
    > > is possible using NASL.
    > 
    > Which kind of check?
    
    A relatively simple default password check.
    
    > > If I "send" on socket 22 and then
    > > "recv_line(socket:22,length:1024);" I will get 
    > > back a bunch of encrypted stuff that is not
    > useable by
    > > NASL, yes?
    > 
    > recv_line probably does not make sense on binary
    > (encrypted) data.
    
    Right, but is there some way to tie ssh into NASL so
    that ssh is initiating the connection? 
    
    > > If that is the case, is there any way to tie NASL
    > into
    > > expect to push and pull data?
    > 
    > Expect will also get a bunch of encrypted data. I
    > don't see how it
    > could help.
    
    Expect can call ssh to take care of business and get
    useful (unencrypted) data back.
    
    > > Any suggestions?
    > 
    > Apart from implementing the SSH protocol in NASL,
    > no.
    
    Is that possible?
    
    > Maybe you could say more about what you want to do.
    
    Thanks.
    
    __________________________________
    Do you Yahoo!?
    Yahoo! Small Business $15K Web Design Giveaway 
    http://promotions.yahoo.com/design_giveaway/
    _______________________________________________
    Plugins-writers mailing list
    Plugins-writers@private
    http://mail.nessus.org/mailman/listinfo/plugins-writers
    



    This archive was generated by hypermail 2b30 : Wed Apr 07 2004 - 01:40:45 PDT