Cannot connect to OpenVas

[ManuelFFF]

Hi,

I am having the same issue reported in https://github.com/HASecuritySolutions/VulnWhisperer/issues/98, but I don't see a valid response about how to fix it. Please help

After install and attempted to run for first time, I got these errors:

INFO:root:main:Running vulnwhisperer for section openvas
INFO:vulnWhispererBase:__init__:Connected to database at /opt/VulnWhisperer/data/database/report_tracker.db
INFO:vulnWhispererOpenVAS:directory_check:Directory already exist for /opt/VulnWhisperer/data/openvas/ - Skipping creation
ERROR:vulnWhispererOpenVAS:__init__:Unable to establish connection with OpenVAS scanner. Reason: 'NoneType' object has no attribute 'text'
ERROR:root:main:__init__() should return None, not 'bool'
ERROR: __init__() should return None, not 'bool'

More details available here: https://github.com/HASecuritySolutions/VulnWhisperer/issues/214#issue-640752948

Thank you

[ManuelFFF]

Hi,

Any help available?

Thank you

[qmontal]

Hi @ManuelFFF,

I am going to reply here for both this issue and #98, as the problem is the same and that ticket is closed.

VulnWhisperer is not being actively developed right now, we are working on having someone to work on the project as we rely on it, but this is not something that is going to be reviewed or fixed soon on our side as we don't have time for it, and our highest priority once we get resources is the refactor of the project towards the vulnerability standard. After that, we will take a look on the bugs that are currently reported and will try to fix them.

Being that said, feel free to do a PR if you manage to find a solution regarding the bug.

Cheers.

[ManuelFFF]

Hi @qmontal ,

I really appreciate you taking a moment to reply to me, as nobody else as done that so far. I understand that the project is stalled, among other reasons, due to lack of resources. It is a shame, because as far as I could see, this is a great project, with many possibilities.

Please let me ask you something: What if I look for a freelancer (or a couple), who can take care of helping and continue with the development of this project? Maybe this person would need some kind of help or guidance at some point.

Would you or someone on the team be willing to provide at least some advice from time to time?

Could you tell me what kind of professional we need: an expert in Python, in ELK stack, in Openvas, or all?

I would appreciate it if you could answer me and at least help me to take the next step and thus prevent this great project from stopping.

Thank you in advance!

[qmontal]

Hi @ManuelFFF,

Thanks for your interest in keeping VulnWhisperer alive. The project is open source and not company owned (HASecuritySolutions is hosting it for the sake of having the project under an org instead of a single person), so unfortunately there is also no available budget to put into the project or dedicated people working on it other than collaborators through PRs.

I have mainly adopted the lead of the project for the last years as I have been the main interested developer, but the intention is for the project to be a community driven one, we just need a bit more of public traction. Meanwhile, as I have other projects to work on, my company is hiring a dev to continue with the designed roadmap to standardize and make it easier for other interested devs to contribute, but the process is very slow, so we just can wait. I believe we already closed the hiring process, but if you have interested candidates we can chat about that through the Slack instance.

The project is definitely not going to be abandoned, but help may not arrive soon enough if you are in a rush to have it up and running. The roadmap that we have is planned for the following years, so there's a lot of things in the backlog to work on in order to bring it to the next level. For now I can only ask you patience :)

Cheers!

[ManuelFFF]

Hi @qmontal

Thanks again for the update. I wish the best for this project and I will be following it closely.

Good luck!

[gruselglatz]

Maybe someone with connections to Universities can help you with security students for a project or something?

[vivekmittal]

Any updates on this? I see that it is in the development stage.