Light

ar0xa / nessus2es Goto Github PK

View Code? Open in Web Editor NEW

27.0 3.0 6.0 105 KB

Send your nessus compliance and vulnerability scan data to ElasticSearch

Python 100.00%

elasticsearch nessus nessus-api-python elk-stack vulnerability compliance compliance-testing vulnerability-scanning elk

nessus2es's Introduction

nessus2es

Send your nessus compliance and vulnerability scan data to ElasticSearch from a file. To download a file from Nessus without using an API (Nessus7) see https://github.com/Ar0xA/Nessus7proxy

Tested with ElasticSearch 6 and Nessus 7 only!

note: if you change the default indexname, be sure to apply the template to the new index too.

note: assumes the timezone of your nessus server is the same timezone this script runs in

#required

python 3
configparser
objdict
python3-dateutil

possible elastic queries

Show me all systems with CRITICAL vulnerabilities that have public exploits available.
Show me all compliance/vulnerability results of a system over a period of time.
Show me all systems with a CVSS score of 7 or higher.
Show me all systems of a certain OS where we log in locally to do vulnerability scanning.
Show me all systems that are vulnerable for CVE-2014-0160
etc., etc.

example kibana output

This quick graph shows a set of vulnerability and compliance scan results

License

This is "whatever"-ware. You can't hold me liable for anything but you can do whatever you like with this code. Credit would be appreciated.

nessus2es's People

Contributors

Stargazers

Watchers

Forkers

dkrul yikez978 ykankaya pedramjm azlkiniue soheileghbali

nessus2es's Issues

run as daemon

Allow run as daemon to periodically poll with the configured settings for new scans to be finished.

Basic Auth Support for New Elasticsearch

The latest free version of elasticsearch supports authentication (base64). Please can you add support for this.

Great script by the way, I was using it all the time. Cheers in advanced.

make timezone configurable

Make it configurable so that the timezone between the nessus scanner and the import server can differ.

standard kinana dashboards

make a few default reporting dashboards

PCI-DSS
ISO 27001
vuln dashboard
etc.

Config file needs to be more modular

You should be able to use a set of things from the config file, instead of it default overwriting everything.

The ES index should be created automatically

if it does not exist, the index should be created.

Also, when creating this index, a timebased component should be included as is usual per ES:

example: nessusdata-20171010

reference information in fields

The reference information should be included in seperate fields.

Especially handy for CIS scans, where results are mapped to CSCV6, NIST 800-171, PCI-DSS, HIPAA, ISO-27001, etc.

You can import the same scan unlimited times

There needs to be a check to prevent importing the same scan countless times.

A flag for overriding this check would be alright.

API poll multiple or all scans

Allow for the submission of more than one scanname, or all, with the API key

Allow override flag importing if index exists

Allow the index check to be overwritten so you can import the same scan again to the same indexname

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.