nessus-analyzer's Introduction

Tool to analyze Nessus output

Description

Nessus-analyzer aims to make Nessus data more useful by:

Giving you the ability to (programmatically) calculate useful security metrics.
Sending Nessus data to MongoDB to maintain a historical view of vulnerability data.
Sending data to Graphite to make awesome vulnerability charts.

Running the analyzer

Every time you run the analyzer you need to supply two options:

The file or you want to analyze.
The action you want to take (find top events, show stats, send to graphite, etc)

Features

Send data to MongoDB to maintain a historical view of vulnerability data.
Send data to Graphite to build a vulnerability dashboard.
Print some pretty statistics

Dependencies

ruby-nessus
mongo-ruby-driver
terminal-table
bson_ext - not actually required, but significant performance penalties without it.

Documentation

The wiki has more information.

Contributing

Want to help? I'd really love it. Check out the contributing guidelines

🍻

nessus-analyzer's People

Contributors

Stargazers

Watchers

nessus-analyzer's Issues

Mongo gem version required must be less than 2.0 (working with 1.12.5)

Errors presented:

root@debian:~/nessus-analyzer# ./nessus-analyzer.rb -f report.nessus -d production
uninitialized constant MongoClient
./nessus-analyzer.rb:218:in `ensure in make_mongo_doc': undefined method `close' for nil:NilClass (NoMethodError)
Did you mean?  clone
	from ./nessus-analyzer.rb:218:in `make_mongo_doc'
	from ./nessus-analyzer.rb:237:in `block in process_nessus_file'
	from /usr/lib/ruby/2.3.0/gems/ruby-nessus-1.2.0/lib/nessus/parse.rb:32:in `initialize'
	from ./nessus-analyzer.rb:226:in `new'
	from ./nessus-analyzer.rb:226:in `process_nessus_file'
	from ./nessus-analyzer.rb:291:in `<main>'

Resolve with:
gem install mongo -v '< 2'

Trying to run this but

./nessus-analyzer.rb -f chi.nessus --show-statistics ./nessus-analyzer.rb:226:in process_nessus_file': uninitialized constant Nessus::Parse (NameError)
Did you mean? Parts
from ./nessus-analyzer.rb:291:in <main>'

Any ideas?

Recommend Projects