Open-AudIT
https://www.open-audit.org/phpBB3/

Problem running Beta 5 audit_windows.vbs (fixed - Win2k)
https://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=5861
Page 1 of 1

Author:  spstech [ Sat Apr 21, 2012 5:07 am ]
Post subject:  Problem running Beta 5 audit_windows.vbs (fixed - Win2k)

After making the change to 4601 and removing the " I tried to run the script, it balks on my system (which has been running the modified Beta 4 script without problems). It is failing after detecting IIS is installed on my system. If I run it on the command prompt with cscript audit_windows.vbs as admin I get the error -

C:\temp\audit_windows.vbs(2972, 4) Microsoft VBScript runtime error: Type mismatch: 'ubound'

If I run it on the command prompt without running as administrator I get -

C:\temp\audit_windows.vbs(2855, 3) SWbemServicesEx: Access is denied.

Author:  Mark [ Sat Apr 21, 2012 9:04 am ]
Post subject:  Re: Problem running Beta 5 audit_windows.vbs

OK, lets sort this one...
audit_host is the machine you are running the cscript command on.
audit_target is the machine actually being audited.

What are the operating systems of both machines?
Which machines have IIS installed?

To hack around this in the meantime -
LINE 2841 - on error resume next
LINE 3104 - on error goto 0

Those should just bypass the section completely if something fails.
We really want to fix this though...

Author:  jpa [ Sat Apr 21, 2012 10:08 am ]
Post subject:  Re: Problem running Beta 5 audit_windows.vbs

Is it not possible to have objItem.ServerBinding be empty rather than an array? Just throw an IsArray check before accessing the field and skip it if its not an array. Same for the other instances of UBound on a possible null.

I don't deal with IIS much so I'm just guessing.

Author:  Mark [ Mon Apr 23, 2012 8:26 pm ]
Post subject:  Re: Problem running Beta 5 audit_windows.vbs

OK, I've altered the audit_windows.vbs script to provide more debugging info and added some checks to hopefully prevent it crashing.
Grab a copy from here - ignore the beta4 bit in the URL, I have to work out how to change that :)
[url]http://bazaar.launchpad.net/~mark-unwin/oav2/beta4/view/head:/other/audit_windows.vbs[/url]

Try it and let me know how it goes.

Author:  jader [ Tue Apr 24, 2012 1:13 am ]
Post subject:  Re: Problem running Beta 5 audit_windows.vbs

[quote="Mark"]OK, I've altered the audit_windows.vbs script to provide more debugging info and added some checks to hopefully prevent it crashing.
Grab a copy from here - ignore the beta4 bit in the URL, I have to work out how to change that :)
[url]http://bazaar.launchpad.net/~mark-unwin/oav2/beta4/view/head:/other/audit_windows.vbs[/url]

Try it and let me know how it goes.

It runs... I have create my first OAv2 audit... trying it on a small network right now.

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/