Re: Re: Nessus scripts and Moore's Law

On Thu, Nov 18, 2004 at 11:14:51AM -0700, Erik Stephens wrote:
> I like this idea a lot.  How difficult would it be to better variablize 
> the port?  What if I want to test against a non-standard port?  Is the 
> answer to just modify the nasl script?  Ideally, it could be passed in 
> on command line or nasl could accept the script on stdin so that I 
> could massage the script on-the-fly, put it in a pipe, and smoke it.

It would make more sense to implement one of the two following :

- When in command-line mode, get_kb_item() prompts the user for
a value ;

- When in command-line mode, the user can 'import' a KB when executing
the script ;


Changing behavior when run in command-line mode is wrong :

- Command-line is used for debugging. If the script behaves differently
when in command-line mode rather than run from within nessusd, it makes
problems un-fixable (or hard to fix at least) ;

- Modifying all the existing scripts is not really an option ;



				-- Renaud
_______________________________________________
Nessus-devel mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus-devel