Web page to start scan via CGI?

"Rarick, David" <[email protected]> Tue, 6 Jan 2009 11:20:08 -0500
Newsgroups gmane.comp.security.nessus.general
Message-ID <745B0880C8035A469CF301FDC0F6ADBF01E29ADD@EMAIL03.CORPORATE.VOX.NET>
This is a multi-part message in MIME format.

--===============0577445932==
Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C9701A.A84A10ED"

This is a multi-part message in MIME format.

------_=_NextPart_001_01C9701A.A84A10ED
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I'm looking for a way to have a web form that collects a host IP
address, a choice of one (of three or so) sets of plugins to use, and a
"start scan" button that calls a script to start the scan accordingly.
The results should be returned as HTML as a new page.

=20

As an overview of what I'm trying to accomplish... we have a customer
"portal" that allows all of our customers to access all of their account
information, see previous billing statements, make changes, etc. The
goal is to add Nessus scanning as a tool. Ideally, they click a link,
and a few seconds/minutes later, the page refreshes (or maybe in a
frame) with the results of the scan.

=20

I'm assuming this is possible with the command line and some fancy
scripting (perl, PHP, whatever)... I just don't know where to start.
Maybe someone has already done something similar?

=20


------_=_NextPart_001_01C9701A.A84A10ED
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
.MsoChpDefault
	{mso-style-type:export-only;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
	{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal>I&#8217;m looking for a way to have a web form that =
collects
a host IP address, a choice of one (of three or so) sets of plugins to =
use, and
a &#8220;start scan&#8221; button that calls a script to start the scan
accordingly. The results should be returned as HTML as a new =
page.<o:p></o:p></p>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

<p class=3DMsoNormal>As an overview of what I&#8217;m trying to =
accomplish&#8230;
we have a customer &#8220;portal&#8221; that allows all of our customers =
to
access all of their account information, see previous billing =
statements, make
changes, etc. The goal is to add Nessus scanning as a tool. Ideally, =
they click
a link, and a few seconds/minutes later, the page refreshes (or maybe in =
a
frame) with the results of the scan.<o:p></o:p></p>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

<p class=3DMsoNormal>I&#8217;m assuming this is possible with the =
command line
and some fancy scripting (perl, PHP, whatever)&#8230; I just don&#8217;t =
know
where to start. Maybe someone has already done something =
similar?<o:p></o:p></p>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

</div>

</body>

</html>

------_=_NextPart_001_01C9701A.A84A10ED--

--===============0577445932==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
--===============0577445932==--