Updated nessus xml stylesheet

CFW cfw_security at comcast.net
Thu Jan 13 14:55:49 EST 2005


Good afternoon, all,

    I have attached a zip file containing up an updated .xsl file that 
can be applied to Nessus XML output.  (It is only 6k, so I hope it is 
okay to post to the list).  I have tested it a little here and it seems 
to work okay, but I have not done any extensive testing so I would not 
recommend relying on the output until more validation has been done.  
The major changes are that results are now sorted by IP and by port and 
that there is a listing of machines / ports with each vulnerability at 
the bottom of the output file.  I hope that this is useful to someone.  
I have been applying it with xsltproc.  It gives a couple warnings that 
I don't know how to get rid of, but it works.  Example:

$ xsltproc nessus.xsl outputscan.xml > report.html

    Also, there are a couple things in this stylesheet that I cannot get 
working and I was wondering if anyone else can help.  I don't really 
know much about XSL and all the changes in this file are a result of a 
lot of trial and error over the past couple days.

- I would like the list at the bottom to be sorted Holes first, then 
Warnings, then Info.  Right now, it is sorted alphabetically by 
severity, so you get Holes, then Info, then Warnings.

- I would like to have a link in each issue in the Host listing to the 
bottom listing, basically a "See other hosts with this issue" link.  I 
can't get this to work since I can't find an equivalent to generate-id 
that works with text rather than nodes (basically I need a hash function).

    I am also interested to hear from anyone that has any other 
stylesheets for Nessus output and especially from anyone that knows 
anything about how to integrate Nessus XML output with XML output from 
other tools such as NMap.

    Finally, is there a specification for the Nessus xml output 
anywhere?  I am curious if there is any current (or planned) support for 
comments that can be put in by the person analyzing the results.

    Thanks and have a good day.

Chuck
-------------- next part --------------
A non-text attachment was scrubbed...
Name: updated-nessus-xsl.zip
Type: application/zip
Size: 6176 bytes
Desc: not available
Url : http://mail.nessus.org/pipermail/nessus/attachments/20050113/c4de0df5/attachment.zip 


More information about the Nessus mailing list