From f1a423c2b877b171ef504bffcbabab947291f867 Mon Sep 17 00:00:00 2001
From: reachableceo <charles@turnsys.com>
Date: Sat, 5 Sep 2026 16:04:50 -0500
Subject: [PATCH] =?UTF-8?q?[#389]=20first=20discovery=20scan=20COMPLETE:?=
 =?UTF-8?q?=2021=20findings=20on=20sectestbed=205104=20=E2=80=94=20GMP=20s?=
 =?UTF-8?q?can=20pipeline=20committed?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

GLPI target → Discovery config → OpenVAS scanner → report
c3294575-3db4-4ad1-8e50-3ca6d23fb137 (18 info, 1 low ICMP-timestamp,
2 unscored). VM shut back down. Pipeline scripts in openvas/scan-pipeline/.
https://projects.knownelement.com/issues/389
---
 openvas/scan-pipeline/README.md        | 15 +++++++++
 openvas/scan-pipeline/check_scan.gmp   |  7 +++++
 openvas/scan-pipeline/create_scan.gmp  | 42 ++++++++++++++++++++++++++
 openvas/scan-pipeline/poll_scan.gmp    |  6 ++++
 openvas/scan-pipeline/scan_results.gmp | 23 ++++++++++++++
 5 files changed, 93 insertions(+)
 create mode 100644 openvas/scan-pipeline/README.md
 create mode 100644 openvas/scan-pipeline/check_scan.gmp
 create mode 100644 openvas/scan-pipeline/create_scan.gmp
 create mode 100644 openvas/scan-pipeline/poll_scan.gmp
 create mode 100644 openvas/scan-pipeline/scan_results.gmp

diff --git a/openvas/scan-pipeline/README.md b/openvas/scan-pipeline/README.md
new file mode 100644
index 0000000..47aabaf
--- /dev/null
+++ b/openvas/scan-pipeline/README.md
@@ -0,0 +1,15 @@
+# scan-pipeline/ — GMP scripts for the GLPI→GVM→findings pipeline
+
+Used in order (see #389): create_scan (Discovery config + glpi-* target +
+OpenVAS scanner) → check/poll (status/progress) → scan_results (report
+summary). Run via:
+
+    docker compose -f ../../docker/gvm-test/compose.yaml run --rm \
+      -v $PWD/<script>:/tmp/<script>:ro gvm-tools sh -c \
+      "gvm-script --gmp-username admin --gmp-password \$PW \
+       socket --socketpath /run/gvmd/gvmd.sock /tmp/<script>"
+
+Creds: ~/.creds/gvm-test.env. First verified run: 2026-09-05,
+task fa43a011-077e-489b-bf9f-b7173cc555b6, report
+c3294575-3db4-4ad1-8e50-3ca6d23fb137 — 21 findings on
+100.127.238.29 (sectestbed-proxmox-pbs, 5104).
diff --git a/openvas/scan-pipeline/check_scan.gmp b/openvas/scan-pipeline/check_scan.gmp
new file mode 100644
index 0000000..496d7d4
--- /dev/null
+++ b/openvas/scan-pipeline/check_scan.gmp
@@ -0,0 +1,7 @@
+from lxml import etree
+t = etree.fromstring(gmp.send_command('<get_tasks filter="rows=-1"/>').encode())
+for task in t.findall('.//task'):
+    if 'first-discovery' in (task.findtext('name') or ''):
+        print('id=' + task.get('id'))
+        print('status=' + (task.findtext('status') or '?'))
+        print('progress=' + (task.findtext('progress') or '?'))
diff --git a/openvas/scan-pipeline/create_scan.gmp b/openvas/scan-pipeline/create_scan.gmp
new file mode 100644
index 0000000..9915ab6
--- /dev/null
+++ b/openvas/scan-pipeline/create_scan.gmp
@@ -0,0 +1,42 @@
+from lxml import etree
+
+# find Discovery scan config
+cfg = etree.fromstring(gmp.send_command('<get_configs details="0"/>').encode())
+config_id = None
+for c in cfg.findall('.//config'):
+    if (c.findtext('name') or '').strip() == 'Discovery':
+        config_id = c.get('id')
+        break
+print('config=' + str(config_id))
+
+# find the target for the pbs (glpi-*)
+tg = etree.fromstring(gmp.send_command('<get_targets filter="rows=-1"/>').encode())
+target_id = None
+for t in tg.findall('.//target'):
+    if 'proxmox-pbs' in (t.findtext('name') or '') or '100.127.238.29' in (t.findtext('hosts') or ''):
+        target_id = t.get('id')
+        print('target=' + (t.findtext('name') or ''))
+        break
+print('target_id=' + str(target_id))
+
+# find the openvas scanner
+sc = etree.fromstring(gmp.send_command('<get_scanners/>').encode())
+scanner_id = None
+for s in sc.findall('.//scanner'):
+    if 'openvas' in (s.findtext('name') or '').lower() or 'OSP' in (s.findtext('type') or ''):
+        scanner_id = s.get('id')
+        break
+print('scanner=' + str(scanner_id))
+
+if config_id and target_id and scanner_id:
+    r = etree.fromstring(gmp.send_command(
+        f'<create_task><name>first-discovery-sectestbed-pbs [#389]</name>'
+        f'<comment>OAM lane first scan; sectestbed target, GLPI-fed</comment>'
+        f'<config id="{config_id}"/><target id="{target_id}"/><scanner id="{scanner_id}"/></create_task>').encode())
+    task_id = r.findtext('.//task') if r.find('.//task') is not None else None
+    print('create_status=' + str(r.get('status')))
+    if task_id is not None:
+        tid = task_id.get('id') if hasattr(task_id, 'get') else task_id.text
+        s = etree.fromstring(gmp.send_command(f'<start_task task_id="{tid}"/>').encode())
+        print('start_status=' + str(s.get('status')))
+        print('task_id=' + str(tid))
diff --git a/openvas/scan-pipeline/poll_scan.gmp b/openvas/scan-pipeline/poll_scan.gmp
new file mode 100644
index 0000000..9c54a8e
--- /dev/null
+++ b/openvas/scan-pipeline/poll_scan.gmp
@@ -0,0 +1,6 @@
+from lxml import etree
+t = etree.fromstring(gmp.send_command('<get_tasks task_id="fa43a011-077e-489b-bf9f-b7173cc555b6"/>').encode())
+task = t.find('.//task')
+print('status=' + (task.findtext('status') or '?'))
+print('progress=' + (task.findtext('progress') or '?'))
+print('report_count=' + str(len(task.findall('.//report'))))
diff --git a/openvas/scan-pipeline/scan_results.gmp b/openvas/scan-pipeline/scan_results.gmp
new file mode 100644
index 0000000..b87c629
--- /dev/null
+++ b/openvas/scan-pipeline/scan_results.gmp
@@ -0,0 +1,23 @@
+from lxml import etree
+t = etree.fromstring(gmp.send_command('<get_tasks task_id="fa43a011-077e-489b-bf9f-b7173cc555b6"/>').encode())
+task = t.find('.//task')
+rep = task.find('.//report')
+rid = rep.get('id') if rep is not None else None
+print('report_id=' + str(rid))
+if rid:
+    r = etree.fromstring(gmp.send_command(f'<get_results filter="report_id={rid} rows=200"/>').encode())
+    total = len(r.findall('.//result'))
+    hosts = set()
+    sev = {}
+    ports = set()
+    for res in r.findall('.//result'):
+        h = res.findtext('host')
+        if h: hosts.add(h)
+        s = res.findtext('severity')
+        sev[s] = sev.get(s, 0) + 1
+        nvt = res.findtext('nvt') or ''
+    print('results=' + str(total))
+    print('hosts_seen=' + ','.join(sorted(hosts)))
+    print('severity_histogram=' + str(sev))
+    for res in r.findall('.//result')[:8]:
+        print('- ' + (res.findtext('nvt/name') or '?')[:70] + ' | sev=' + (res.findtext('severity') or '?'))