Greetings,
I was trying to use a custom database with vulscan that I got from this link: https://cve.mitre.org/data/downloads/index.html. I tried to follow #17.
When I opened the database, of course, the structure was different from the other databases that come with vulscan. So I used a python script to restructure the database this way:
I also changed the name of the db to allcve.csv. I then added the following to vulscan.nse under all the dbs:
db[9] = {name="CVE Updated", file="allcve.csv", url="https://cve.mitre.org", link="https://cve.mitre.org/cgi-bin/cvename.cgi?name={id}"}
I then ran the following command:
nmap -sV --script vulscan --script-args vulscandb='allcve.csv' 0.0.0.0
but unfortunately this is what I got:
Starting Nmap 7.80 ( https://nmap.org ) at 2020-08-15 02:12 Arab Standard Time
Nmap scan report for ...
Host is up (0.085s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
80/tcp open http nginx 1.14.0 (Ubuntu)
|_http-server-header: nginx/1.14.0 (Ubuntu)
443/tcp open ssl/http nginx 1.14.0 (Ubuntu)
|_http-server-header: nginx/1.14.0 (Ubuntu)
|_http-trane-info: Problem with XML parsing of /evox/about
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 26.25 seconds
running the script normally like this returned a lot of different vulnerabilities:
nmap -sV --script vulscan 0.0.0.0
Thank you in advance!
Greetings,
I was trying to use a custom database with vulscan that I got from this link: https://cve.mitre.org/data/downloads/index.html. I tried to follow #17.
When I opened the database, of course, the structure was different from the other databases that come with vulscan. So I used a python script to restructure the database this way:
I also changed the name of the db to allcve.csv. I then added the following to vulscan.nse under all the dbs:
I then ran the following command:
but unfortunately this is what I got:
running the script normally like this returned a lot of different vulnerabilities:
Thank you in advance!