Skip to content

Using a custom CSV DB #37

Description

@AMJasser

Greetings,

I was trying to use a custom database with vulscan that I got from this link: https://cve.mitre.org/data/downloads/index.html. I tried to follow #17.

When I opened the database, of course, the structure was different from the other databases that come with vulscan. So I used a python script to restructure the database this way:

{id};{title}

I also changed the name of the db to allcve.csv. I then added the following to vulscan.nse under all the dbs:

db[9] = {name="CVE Updated",	file="allcve.csv",	url="https://cve.mitre.org",	link="https://cve.mitre.org/cgi-bin/cvename.cgi?name={id}"}

I then ran the following command:

nmap -sV --script vulscan --script-args vulscandb='allcve.csv' 0.0.0.0

but unfortunately this is what I got:

Starting Nmap 7.80 ( https://nmap.org ) at 2020-08-15 02:12 Arab Standard Time
Nmap scan report for ...
Host is up (0.085s latency).
Not shown: 997 filtered ports
PORT    STATE SERVICE  VERSION
22/tcp  open  ssh      OpenSSH 7.6p1 Ubuntu 4ubuntu0.3 (Ubuntu Linux; protocol 2.0)
80/tcp  open  http     nginx 1.14.0 (Ubuntu)
|_http-server-header: nginx/1.14.0 (Ubuntu)
443/tcp open  ssl/http nginx 1.14.0 (Ubuntu)
|_http-server-header: nginx/1.14.0 (Ubuntu)
|_http-trane-info: Problem with XML parsing of /evox/about
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 26.25 seconds

running the script normally like this returned a lot of different vulnerabilities:

nmap -sV --script vulscan 0.0.0.0

Thank you in advance!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions