Version 19 of the Nessus parser is here. There are a few features I am really excited about. Listed below are all the newly added features.
1. CPE report
2. Added Plugin Family Mobile Devices
3. Added Plugin Family Oracle Linux Local Security Checks
4. Added Plugin Family Scientific Linux Local Security Checks
5. Added CVSS Score Data
6. Added CVSS Total Score
The features I think are really exciting, are the CPE and CVSS related features.
First there is a new table with all the CPE’s found during the scan. The CPE’s can help you identify systems with specific software or hardware configuration. This is a great tool to help with software inventory.
The second item is the addition of CVSS information to the vulns tabs.
The third really neat feature allows you to use the CVSS score to assess risk. On the new “CVSS Score Total” tab there is a row for each IP address and the sum of each CVSS for critical, high and medium severities. To allow the analysts to assign risk levels there is a multiplier for each severity level. By changing the value in each multiplier, you effect the over all score assigned to each address.
parse_nessus_xml.v19.pl
Greetings All,
Here is a maintenance release of the Nessus parser. I would like to make a special shout out to Joe M (joebeast20 – AT – yahoo.com) for finding a bug and contributing the code. The bug Joe found were missing plugin families in the check and reporting functions. I took the opportunity to update the plugin families so all plugin families are now in the tool.
Thanks again Joe.
parse_nessus_xml.v15.pl
Nessus Parser v0.10 – This is a program to parse a series of Nessus XMLv2 files into a XLSX file. The data from the XML file is placed into a series of tabs to for easier review and reporting. New features with this edition are better reporting of policy plugin families, user account reporting, summary graphs, and a home page with summary data. For more information and questions please contact Cody Dumont from the NWN STAR team.
Email – cdumont”AT”nwnit.com and cody”AT”melcara.com
The Nessus parser requires some additional modules, they are:
• XML::TreePP;
• Data::Dumper;
• Math::Round;
• Excel::Writer::XLSX;
• Data::Table;
• Excel::Writer::XLSX::Chart;
To use the Nessus Parser simply install Perl and the modules above. Then change directory to the folder where the Nessus XMLv2 data files are stored. The enter the following command “perl parse_nessus_xml.v10.pl .” The “.” means the current directory. The parser looks in the directory passes as the command line argument and searches for XML files. Then parses through each file. Once the data from each file is collected, the parser will put the data into the XLSX file. Once the parser is finished there will be an XLSX file in the same folder passed earlier. Review the file and find the results of your Nessus scan.
I want to give a special thanks to John McNamara , John was instrumental in assisting me in creating the pie charts in this version. John is also the author of the Excel Writer perl modules.
parse_nessus_xml.v10.pl