Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/securifera/MaltegoNessusParser

Maltego transform for visualizing Nessus scan data
https://github.com/securifera/MaltegoNessusParser

Last synced: 22 days ago
JSON representation

Maltego transform for visualizing Nessus scan data

Awesome Lists containing this project

README

        

MaltegoNessusParser
===================

Maltego transform that processes raw Nessus scan files and creates native and
custom entities representing hosts and outcome data

 

Install
-------

- Create transforms directory in the Maltego install directory

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
C:\Program Files (x86)\Paterva\Maltego\v4.1.0\securifera-transforms
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- Copy python scripts and supporting file to this directory (found in the
securifera-transforms directory of repository)

- Import MTZ file into Maltego

- Select *Import/Export* tab in Maltego

- Select *Import Config*

- Select **MaltegoNessusParser.mtz** from repository

- Confirm all entities, transforms, and other items are checked

- Install prerequisites

- Install Python (Only tested on 2.7 currently)

- Install python ipaddress libraries

- pip install ipaddress

- Install python Tkinter libraries (not necessary on Windows I think)

- apt-get install python-tk

 

Usage
-----

- Drag **NessusScan** entity into the a new Maltego graph

- Right click and select the **To IP Address [Using Scan Results]** transform

![](images/TransformUsage1.png)

- If the **Nessus Scan Path** property has not been set the user will be
prompted

![](images/PathPrompt.PNG)

- Plugin selection screen will appear to apply filters on plugins being
included during processing

![](images/PluginPrompt.PNG)

- **IPv4Address** entities will be created from all unique hosts in Nessus
scans

- Right click the **IPv4Address** entities and select **To Nessus Scan Data**
transform

![](images/TransformUsage2.png)

- Entities will be created for services, ports, and various other plugin
output data

![](images/TransformUsage3.png)