Nessus XMLRPC & Python

[thorin]

Yes I know this isn't directly BT related and this isn't a Nessus or Python support forum, but I'm going to ask anyway

I'm looking into leveraging this Nessus XMLRPC Python implementation:
http://code.google.com/p/nessusxmlrpc/

I've got it working for launching scans etc but I need a way to hook it so that ctrl-c will actually stop the scan(s).

I've tried wrapping a try/except around the code within the main "while True" block and then calling to x.stop() or setting scans=x.stop() but it doesn't seem to work. I'm pretty sure I'm missing something trivial or doing something stupid. Maybe I've been staring at it too long.

I'm hoping that someone with some more Python knowledge/experience might get me pointed in the right direction.

Thanks in advance!

[thorin]

So after some more poking and prodding I discovered that the stop function within nessus.py wasn't well thought out (and doesn't actually do anything useful).

I've added a stop function to the XMLRPC interface and extended nessus.py to leverage it. I'll be contributing these changes back to the project. (Hopefully they'll actually publish the updates, though there appear to be some un-addressed issues in their bug tracker )

http://code.google.com/p/nessusxmlrp...es/detail?id=6

This thread can be closed or ignored.

[CyberNinja]

So after some more poking and prodding I discovered that the stop function within nessus.py wasn't well thought out (and doesn't actually do anything useful).

I've added a stop function to the XMLRPC interface and extended nessus.py to leverage it. I'll be contributing these changes back to the project. (Hopefully they'll actually publish the updates, though there appear to be some un-addressed issues in their bug tracker )

http://code.google.com/p/nessusxmlrp...es/detail?id=6

This thread can be closed or ignored.

Hey, would you share the new script?
I am also looking for this, and if you already have, no need for me to create the same.

BTW, do you know if it is possible to specify which ports are open via the script?
My idea was to run NMAP first and then "feed" the result into Nessus and automagically start a scan without the need for Nessus to do a port scan also.

[thorin]

Hey Cyberninja I'm away from work for a few days and so don't have access to the code.

Next Mon or Tues I'll see if I can attach the modified files and some diffs to the google code ticket linked earlier in this thread.

As for nmap/nessus integration you could check out:
http://blog.tenablesecurity.com/2009...-scanning.html
http://www.tenable.com/products/ness.../miscellaneous

[thorin]

The google code ticket now contains a summary of my change/additions:

http://code.google.com/p/nessusxmlrp...es/detail?id=6

Scans are stopped based on KeyboardInterrupt (ctrl-c) or SystemExit (which it shouldn't really hit, I was just being overly cautious in-case someone does a sys.exit() upstream).

[thorin]

@CyberNinja have you been able to use the code? Any questions or problems?