rapid7/metasploit-framework — pull request #385 by brandonprry (2012-05-13 21:29:43+00:00)
Title: Wapiti XML report import

The following pull request adds support for the XML report wapiti can spit out. It saves WebVulns to the DB. I do not see a way to view the current web vulns in the db in the framework, so I used irb to verify the data was being saved appropriately

Below is a run through
---------------------------------------------------------------
Script started on Sun 13 May 2012 02:12:33 PM PDT
bperry@ubuntu: ~/work/moar_metsploit/metasploit-frameworkbperry@ubuntu:~/work/moar_metsploit/metasploit-framework$ ./msfconsole -L

=[ [33mmetasploit v4.3.0-release [core:4.3 api:1.0][0m
+ -- --=[ 839 exploits - 472 auxiliary - 142 post
+ -- --=[ 250 payloads - 27 encoders - 8 nops

msf> db_connect postgres:password@127.0.0.1:5433/msf_openvas
msf> db_import ~/Desktop/wapiti.rpt
msf> hosts -d
Hosts
=====

address mac name os_name os_flavor os_sp purpose info comments
------- --- ---- ------- --------- ----- ------- ---- --------
192.168.1.116 192.168.1.116 Unknown device

[*] Deleted 1 hosts
msf> db_import ~/Desktop/wapiti.rpt
[*] Importing 'Wapiti XML' data
[*] Successfully imported /home/bperry/Desktop/wapiti.rpt
msf> hosts
Hosts
=====

address mac name os_name os_flavor os_sp purpose info comments
------- --- ---- ------- --------- ----- ------- ---- --------
192.168.1.116 192.168.1.116 Unknown device

msf> irb
[*] Starting IRB shell...

>> ::Mdm::WebVuln.find(:all)
=> [#, #, #, #, #, #, #, #, #, #, #, #]
>> exit
msf> exit
bperry@ubuntu: ~/work/moar_metsploit/metasploit-framework$

Script done on Sun 13 May 2012 02:13:51 PM PDT