The following XSL file will dump all the data in the newer .nessus format.
It only shows report, not policy information. No fancy HTML, this is meant
to be just a starting point for your own work.
As I get time, I plan on updating this to mimic my previously posted xsl's
to allow for dumps of just medium and high severity issues, but wanted to
toss this out there for those that might find it useful.
To do: implement templates/css (both started, just not done)
Finally: I'm not an XML guy, so if there are obvious errors, please let me
know. I just know it's working in my testing (tested on a 37MB .nessus
file. Happy to tweak as needed. Contribute back any mod's you make that
might be generally useful.
And more finally: note that the newer .nessus format contains all the
reports - so this xsl dumps the report, the multiple hosts, the findings,
and then loops through to the next report, multiple hosts+findings, etc.
Mike V
<?xml version='1.0' encoding='utf-8' ?>
<!--comments and suggestions to mike - mnv@alumni.princeton.edu -->
<!--Use as you wish, credit, and contribute back-->
<!--updated at www.aznetworksecurity.com-->
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform"; version="
1.0" xmlns:a="a">
<xsl:output method="html" indent="yes"/>
<!--This section is for the browser bar and heading of the report-->
<!--It also limits which sections of the xml are used via apply-templates-->
<xsl:template match="/">
<head>
<title>Nessus Report</title>
</head>
Nessus Vulnerability Report
<xsl:apply-templates select="NessusClientData/Report"/>
</xsl:template>
<!--Parses the report name to output date and time-->
<xsl:template match="Report">
<xsl:for-each select="ReportName">
<p/><br/>Date/Time:
<xsl:variable name="DateMo" select="."/><xsl:value-of
select="substring($DateMo,5,2)"/>.<xsl:variable name="DateDay"
select="."/><xsl:value-of select="substring($DateDay,7,2)"/>.<xsl:variable
name="DateYr" select="."/><xsl:value-of select="substring($DateYr,1,4)"/> at
<xsl:variable name="TimeHour" select="."/><xsl:value-of
select="substring($TimeHour,9,2)"/>:<xsl:variable name="TimeMinute"
select="."/><xsl:value-of
select="substring($TimeMinute,11,2)"/>.<xsl:variable name="TimeSecond"
select="."/><xsl:value-of select="substring($TimeSecond,13,2)"/>
</xsl:for-each>
<!--Outputs all the data, starting with Hostname and parsing the results-->
<xsl:for-each select="ReportHost">
<p/><xsl:for-each select="HostName">
<br/>Host IP: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="netbios_name">
<br/>Netbios Name: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="mac_addr">
<br/>Mac Address: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="dns_name">
<br/>DNS Name: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="os_name">
<br/>OS: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="num_lo">
<br/>Low Severity: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="num_med">
<br/>Medium Severity: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="num_hi">
<br/>High Severity: <xsl:value-of select="."/>
</xsl:for-each>
<!--Next section loops through all the ReportItem information-->
<xsl:for-each select="ReportItem">
<p/><xsl:for-each select="port">
<br/>Port: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="severity">
<br/>Severity: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="pluginID">
<br/>Plugin ID: <xsl:value-of select="."/>
</xsl:for-each>
<xsl:for-each select="data">
<br/>Data: <xsl:value-of select="."/>
</xsl:for-each>
</xsl:for-each>
</xsl:for-each>
</xsl:template>
</xsl:stylesheet>
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
