Nessus Vulnerability XML Parser v7
December 14th, 2010
Greetings ALL,
A few people asked for some changes to the output of the Nessus Vulnerability XML Parser, so I here they are. One High, Medium and Low severity Vulnerability tabs I added the following fields: BID, CVE, OSVDB, Description and Solution. These field can help provide the user with a little more data or aid the priorities given to corrective actions. Also my first contributor added code to put the date on the end of the file names. Thank you very much Whinston, I am very happy to added your contribution to my project.
parse_nessus_xml.v7.pl
Cody,
Thanks for the credit, but it’s all on you.
Thank you, again, for this outstanding product!
Whinston
Can you help??
I changed line 326 to:
my $dir = “c:\temp\nessus” or die print “Please put the directory where NESSUS NBE files are located.\n”;
I know jack about perl and I’m not sure why I keep getting the same error:
Printing the Main Report
Creating Spreadsheet Data
Preparing Hosts Data
Create General Vulnerability Data
Creating Policy Compliance Data
Creating Windows Management Data
Creating Nessus Report Spreadsheet
Can’t open c: emp
essus
essus_report_20110410091801.xls. It may be in use or protected at C:\temp\NESSUS
\parse_nessus_xml.v7.pl line 598
Can’t call method “add_worksheet” on an undefined value at C:\temp\NESSUS\parse_
nessus_xml.v7.pl line 610.
Thanks for using my tool, I am sure you will like it once you get passed this issue.
Perl in general is unix based, meaning the backslash \ character to indicate a literal. For example if you wanted a string to have a double quote “, you would enter \” . So when you use Windows and Perl you can either using a double backslash or a forward slash. If you use the forward slash, perl will make the necessary conversion. So your variable would be set like this…
my $dir = “c:\\temp\\nessus”
Or
my $dir = “c:/temp/nessus”
I hope this helps, email back if there is anything else.
Cody
Cody, got good output from a couple of .nessus files but now I keep getting an error:
Trying v7…
test$ perl parse_nessus_xml.v7.pl .
The NESSUS XML Paster is now running.
Parsing File nessus_report_172.x.x.x.nessus.xml
Finished Parsing File nessus_report_172.x.x.x.nessus.xml
Printing the Main Report
Creating Spreadsheet Data
Preparing Hosts Data
Create General Vulnerability Data
Creating Policy Compliance Data
Creating Windows Management Data
Modification of non-creatable array value attempted, subscript -4 at parse_nessus_xml.v7.pl line 85.
Then tried v8…
test$ perl parse_nessus_xml.v8.pl .
Parsing File nessus_report_nessus_report_172.x.x.x.nessus.xml
Finished Parsing File nessus_report_nessus_report_172.x.x.x.nessus.xml
Printing the Main Report
Creating Spreadsheet Data
Preparing Hosts Data
Create General Vulnerability Data
Creating Policy Compliance Data
Creating Windows Management Data
Modification of non-creatable array value attempted, subscript -4 at parse_nessus_xml.v8.pl line 103.
Ideas? Thanks!
There were some changes to Nessus data that my script does not like. But today I am releasing version 10 of the Parser, enjoy.
Hi,
I am using this script for .nessus files as is current Nessus file format. Current nessus file format has no mention of Nessus V2.
I am getting this error as “Can’t call method “add_worksheet” on an undefined value ”
Kindly help me on this..
This sounds like a Excel Module issue, are you still having the issue?
I am having an issue.
“Create General Vulnerability Data
Creating Policy Compliance Data
Creating Nessus Report Spreadsheet
Can’t call method “add_worksheet” on an undefined value at parse_nessus_xml.v21.pl line 1528.”
Already installed all the modules requested by v21 AND v10. Any ideas?
Thanks
J
I keep getting the below error, could anyone please help me ?
Can’t call method “add_worksheet” on an undefined value at parse_nessus_xml.v21.pl line 1528.