Friday, March 29, 2013

Python for penetration testing - 2

So, as mentioned in the last post - really a long time ago! - we chose Python to be the programming language for our penetration testing tool.

The fist step: Scanning:

For scanning, we are using OpenVas. As many security geeks know, OpenVas is one of  the best vulnerability assessment, network scanning software, it has so many capabilities and it's open source. OpenVas 3 offers a layer between the OpenVas scanner and OpenVas clients like Greenbone security assistant. This new layer is a core component called OpenVas-Manager.
OpenVas Management protocol (OMP): it's a XML based protocol used to talk to the OpenVas-Manager. openvas.omplib is a pure python implementation of the OMP to allow the easy access to OpenVas-Manager. Also if you download the package you will find the omp-cli, a command line for OpenVas-Manager, for interacting with it.

 For more information, visit the openvas.omplib page on Python's package index.

No comments:

Post a Comment