Discussion:
Scanning Domain/URL with OpenVAS 7
Breyten Borman
2014-08-07 07:44:46 UTC
Permalink
Good day
Is there any way to maintain the URI for each Domain/URL in the report, as there is no way of telling which vulnerability is relevant to which URL if there are 20 domains hosted on a single server?
When using OpenVAS to scan multiple websites hosted on a single shared web-server platform, once complete the OpenVAS report revert to an IP address.
RegardsBreyten
Jan-Oliver Wagner
2014-09-01 20:34:36 UTC
Permalink
Am Donnerstag, 7. August 2014, 09:44:46 schrieb Breyten Borman:
> Is there any way to maintain the URI for each Domain/URL in the report, as
> there is no way of telling which vulnerability is relevant to which URL if
> there are 20 domains hosted on a single server? When using OpenVAS to scan
> multiple websites hosted on a single shared web-server platform, once
> complete the OpenVAS report revert to an IP address. RegardsBreyten

can you provide an example on what you are after?


--
Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/
Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B
202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
Breyten Borman
2014-09-04 13:56:30 UTC
Permalink
Hi Jan-Oliver
What I am looking for is a way for the scans to report per vhost instead of the server IP address.
I've created a scan config that includes vhosts and vhosts_ip preferences, yet still the reports return the IP address of the server hosting the virtual hosts.

For example;

Scan Config:
vhosts = host1.mydomain.com, host2.mydomain.com
vhosts_ip = 192.168.1.100

Targets:
Hosts = host1.mydomain.com, host2.mydomain.com

My question is whether I'm doing something wrong since the reports still return an IP address (192.168.1.100) and not vhosts (host1.mydomain.com, host2.mydomain.com)?

Thank you for your response.

Regards
Breyten

> From: Jan-***@greenbone.net
> To: openvas-***@wald.intevation.org
> Date: Mon, 1 Sep 2014 22:34:36 +0200
> Subject: Re: [Openvas-discuss] Scanning Domain/URL with OpenVAS 7
>
> Am Donnerstag, 7. August 2014, 09:44:46 schrieb Breyten Borman:
> > Is there any way to maintain the URI for each Domain/URL in the report, as
> > there is no way of telling which vulnerability is relevant to which URL if
> > there are 20 domains hosted on a single server? When using OpenVAS to scan
> > multiple websites hosted on a single shared web-server platform, once
> > complete the OpenVAS report revert to an IP address. RegardsBreyten
>
> can you provide an example on what you are after?
>
>
> --
> Dr. Jan-Oliver Wagner | ++49-541-335084-0 | http://www.greenbone.net/
> Greenbone Networks GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B
> 202460
> Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
> _______________________________________________
> Openvas-discuss mailing list
> Openvas-***@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
Loading...