Network Configuration Builders

Hi Cody,

We love this tool, and the effort you put in, thanks so much!

But… the link to download v22 doesn’t seem to exist; is this a minor oversight?

Thanks,

Stevie

Sorry Cody but how can I download this new version?

Thanks a lot, I was just commenting that I couldn’t download. Right on time!

Hi Cody

I really appreciate your efforts. This new version is a big help and works great.

Cheers for that.

jsoberoi

Cody –

This tool is awesome! I use it all the time

Thanks for this – its so much quicker than messing with CSV’s!

Very much appreciated.

I am running this inside strawberry perl on Windows. I think that there’s a breakdown in how the code handles slashes. Here’s an example: Storing Vulnerability Data for hostname.domainname.com
\C no longer supported in regex; marked by <– HERE in m/DOMAINNAME\ <– HERE ASSETNAME.supremeruler/ at perl_scripts\parse_nessus_xml.v22.pl line 1477.

Is this related to this being written to work on *nix hosts, and I am trying to write to a Windows file system?

On a side note, is there by any chance any logging enabled for this?

Thanks in advance!

Clay

wanted to share a few things. I am running strawberry perl on windows 7. I have perl 5.24.0.1 installed.

the problem is fixed. I had to use the \Q & \E character escape for regexes in lines 1477 and 1484 to prevent names with might contain \C from being parsed.

1477: if ($a =~ /\Q$usr_name\E/ism){$_->{$act_type} = “Y”}

1484: if($a =~ /(?=\Q$netbios_name\E).+?(\Z)/ism){

it’s running perfectly now. I took an entire directory holding over 200mb of nessus files, and it rendered a single 29mb spreadsheet, as advertised.

great idea, Cody!

Is there a file size limit? Every time I run it, I get;

################################################################################
NESSUS PARSER V0.22
################################################################################
Killed

thanks for the update and all your hard work on this.

Been waiting for this!!!! Much better than any other parser out there.

THANKS!

Hi Cody,

Thanks for the tool, I was just wondering if you could create one tab on here, I was trying to modify the code myself, but am missing something I think.

I’d love to have a tab with the following:

IP Address, DNS (fqdn), Operating System, Number of Services, Number of Vulnerabilities (excluding informational)

And if at all possible:

Another tab with:

OS, number of nodes with this OS, Number of Running Services, and Number of Vulnerabilities

Would this be possible? (The second one I was struggling with more)

Thank you!

Hi Cody

The script is failing with the following error with some reports:
Can’t use string (“33929”) as an ARRAY ref while “strict refs” in use at parse_nessus_xml.v22.pl line 2908.

Could you have a look when you get time?

Cheers

jsoberoi

Great work Cody!! Appreciate your efforts.

V22 works great, V21 stopped working with new the Nessus Plugins. Thank you for maintaining the Nessus Parser.

THANK YOU SO MUCH FOR THE UPDATE! This tool just saved my life immensely.

Getting an error when I run.

Unmatched ( in regex; marked by <– HERE in m/MK_DO_NEW_FG_( <– HERE GZ/ at parse_nessus_xml.v22.pl line 1518

Could you help?

Thanks

Cody,
I love the script! however Today when a was running a larger nessus file the (482,723 KB) The script responds with “Killed” directly after the NESSUS PARSER V0.22 Banner. Idid notice that the scanner did an update on 9-10-16 to 6.8.1. Any assistance would be greatly appreciated.

Mark

Are there instructions on running the script with a nessus file?

Hi Cody,

Thank you so much for this awesome Nessus Parser. Worked like a charm.

Regards,
Aditya Mathur

Thank you Cody!

I like this!!
It would be perfect if you had a repository in github!! 🙂

Thanks for this stuff.

Nice script by the way, i’m using it since a long time.

To share the information :
i recently got error “can’t locate object method “newdir” /ur/…/Workbook.pm line 1003″.
It’s seem to be related with a new feature added to perl.
To fix it i had to update CPAN package and now that’s working again.

Hi,
karacali$ perl parse_nessus_xml.v22.pl -f ktserver247.xml

These are the new features with version 22

1. Fixed bug in info and low severity tabs
2. Added support for new plugin families “Incident Response, F5 Networks Local Security Checks, Huawei Local Security Checks, OracleVM Local Security Checks, and alo Alto Local Security Checks”
3. Fixed issue with “Number of IPs Scanned” count.
4. Fixed issue with “Total Unique” count.
5. Updated most common Critical and High Severity vuls
6. Fixed bug in UserAccountData Regex
The target file is “ktserver247.xml”.
File ktserver247.xml is a Valid Nessus Ver2 format and will be parsed.

################################################################################
NESSUS PARSER V0.22
################################################################################
Parsing File ktserver247.xml

Finished Parsing File ktserver247.xml

Creating Spreadsheet Data
Preparing Hosts Data

There is a new plugin family added, it is Brute force attacks.
and stop.
What is the problem?

Hi Cody,

This is a great tool. I’m very grateful for your job. But I think there is a more important thing that must be on the reports tables. The parser report does not generate a table which contains “IP versus vulnerability” tab! Yes, you have “Vulnerability to IP Summary” tabs, but it consists of “plugin name versus IP”! This is not we need. We need “IP versus (Vulnerability, Description, and Solution).” Also, IPs should not be cumulated in a row with comma seperated for same vulnerability because a display in that way prevent pivoting in Excel and other analysis.

Regards

Hi Cody,

I’m getting the error below. Any thoughts how I can fix this?
Thanks in advance!

Cheers,
Rob

Finished Parsing XML Data

Create General Vulnerability Data
Creating Policy Compliance Data
Creating Nessus Report Spreadsheet
Can’t call method “add_worksheet” on an undefined value at parse_nessus_xml.v22.pl line 1553.

Hi Cody,

The parser seems to not produce an output. I have unzipped added the .nessus in the folder to run and get no csv/xls output.

Dear Cody,

I’m using your super script from one year ago and I love it.
Thanks!!

Is there an install guide?

Hi Cody,

My name is Gustavo ( @gustavorobertux ), and I have one question !

Can you help-me to put one column more in host_scan_data, with a CVE content ?

Sorry my English, this is not my first language 🙂

Cya !

Good morning Cody,
I have been using version version v0.21 with great success. I am very excited about the v0.22 update and can’t wait to use it. Here is the problem. I need the XML output from the scanner that has all the plugins with their related CVEs. Getting the XML file is not the problem; it’s converting the XML to CSV. When I ask Tenable to publish the CSV data they respond that they cannot support a third party parser. But the parser is not the issue, it works great! The issue is converting the XML data into CSV. The instructions call for using the MS XSL processor to convert the XML but I need to go thru hoops to get that command line utility approved for use.
Do you have any ideas to get around the conversion?

Hi cody,

thanks for the code but I experience the Out of memory error for the files nearly 300mb. Is there any solution to overcome this.

Do you have a donation link?

Hi Cody,
there seem to be a little bug with your script while parsing results that contain plugin ID 11137 (and maybe others). The fact that there’s a comma in the plugin name just causes every column data to be shifted and not correctly fitted in the resulting xls. Can you please check?
Thanks.

Hi Cody,

I am running your Nessus Parser v22 on a Mac. I seeing the following error message.

Creating Spreadsheet Data
Preparing Hosts Data

Finished Parsing XML Data

Create General Vulnerability Data
Creating Policy Compliance Data
Creating Nessus Report Spreadsheet
Can’t call method “add_worksheet” on an undefined value at parse_nessus_xml.v22.pl line 1553.

I have checked out other versions of your parser and they have the same result.

Thanks
Tom

Ha looks like specifying the file name in the perl command works

perl /path/to/script/parse_nessus_xml.v22.pl -f /path/to/file.nessus

This version seems incredibly functional and does most of what is needed.
Is this still being managed and potentially updated in the future? I’m not sure that Tenable is changing much, but it’s still good information to have.

Cody,

This tool absolutely rocks. Your efforts are very much appreciated.

Thank you!

Craig

Amazing tool, very handy. Thanks for sharing!

There may be a bug with huge file though. When merging several Nessus files into a single one with the script available at https://gist.github.com/mastahyeti/2720173 to avoid duplicates, then your Nessus Parser fails with the following error:
Can’t use string (“33929”) as an ARRAY ref while “strict refs” in use at parse_nessus_xml.v22.pl line 2908.

The merged file seems clean at a first glance… Only very big [102’339 lines]

for the vulnerability to IP summary page, is there a way to add the description and solution fields? I have played with it but can’t figure out how to add these to field to that tab.

Hi, This script looks awesome but I’m getting an error at the Nessus Parser section.

“Can’t call method “add_worksheet” on an undefined value at parse_nessus_xml.v22.pl line 1553.” Any thoughts?

Thanks,
Jay

I should probably also mention that I’m using strawberry perl on windows.

I may have spoken too soon. Looks like I was using -d with a single file instead of -f. Nice job.

Cody, You are one Super Engineer! Much appreciation for your hard work and dedication to helping! YOU ROCK!