Re: [Plugins-writers] recv_line From ssh?

packetjack@private

--- Michel Arboi <mikhail@private> wrote:
> Jack Polimer <packetjack@private> writes:
> 
> > I want to create a check for ssh, but I don't
> think it
> > is possible using NASL.
> 
> Which kind of check?

A relatively simple default password check.

> > If I "send" on socket 22 and then
> > "recv_line(socket:22,length:1024);" I will get 
> > back a bunch of encrypted stuff that is not
> useable by
> > NASL, yes?
> 
> recv_line probably does not make sense on binary
> (encrypted) data.

Right, but is there some way to tie ssh into NASL so
that ssh is initiating the connection? 

> > If that is the case, is there any way to tie NASL
> into
> > expect to push and pull data?
> 
> Expect will also get a bunch of encrypted data. I
> don't see how it
> could help.

Expect can call ssh to take care of business and get
useful (unencrypted) data back.

> > Any suggestions?
> 
> Apart from implementing the SSH protocol in NASL,
> no.

Is that possible?

> Maybe you could say more about what you want to do.

Thanks.

__________________________________
Do you Yahoo!?
Yahoo! Small Business $15K Web Design Giveaway 
http://promotions.yahoo.com/design_giveaway/
_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers