Nessus Professional Key Github

0 views
Skip to first unread message

Christina Smith

unread,
Aug 5, 2024, 1:19:28 AM8/5/24
to soncdesmera
Iam trying to setup the splunk addon for tenable to pull scan reports from our nessus pro box. I have setup the addon on a heavy forwarder with the information needed but i never see anything come over. My fear in researching is that this functionality doesn't work as smoothly based on issues i have seen others have. I wondered if anyone has successfully gotten this working and how? My settings are: (please note that my heavy forwarder performs no indexing functionality, so the "nessus" index is only created on my actual indexer. Hoping this isn't the problem.)

As far as I know this is related to the change of API format that was introduced in Nessus 8. I do not believe this addon currently works for the new API structure, but it certainly should be able to. I have seen some projects on github that are able to pull from Nessus 8.x so my plan was to try to edit this Splunk app with similar logic.


Scan exports are still fully supported in 8.1.0. This functionality may have changed in how it needs to be queried, so it is very important to read the API documentation for your existing version for 3rd party integrations.


Exegol is a community-driven hacking environment, powerful and yet simple enough to be used by anyone in day to day engagements. Exegol is the best solution to deploy powerful hacking environments securely, easily, professionally. No more unstable, not-so-security-focused systems lacking major offensive tools. Kali Linux (and similar alternatives) are great toolboxes for learners, students and junior pentesters. But professionals have different needs, and their context require a whole new design.


Docker images: a set of pre-built docker images and dockerfiles that include a neat choice of tools, zsh plugins for power users, pre-filled history ready to use with environment variables, awesome resources, custom configs and many more. Images can either be built locally or pulled from the official Dockerhub registry.


Offline resources: Tired of always having to search github for your favorite privesc enumeration script? Exegol includes a set of resources, shared with all exegol containers and your host, including LinPEAS, WinPEAS, LinEnum, PrivescCheck, SysinternalsSuite, mimikatz, Rubeus, PowerSploit and many more.


With just a couple of Nessus Professional scanning nodes it was possible to scan all the infrastructure and network perimeter (see Vulnerability Management for Network Perimeter). Price for each node was fixed and reasonable. And you could make your any reports from the raw scan data, as you like it.


Personally I have been managing VM for about 10 years now and during that time always found QUALYS to be the best solution. They always offer free trials of anything I want to test and as many IPs as I would like to scan.


In this case the github part is a complete misinterpretation on your side. Currently modules are step by step migrated to github and i see no intention to make OpenVAS closed source. Rather it looks like quite the opposite. And if you check the github tags correctly you will also find the apparently disappeared GSA 7.0.2.


CVE is not the only measurement for vulnerabilities. And if you e.g. check Android CVEs you will see for example 1.5k CVEs which are just outside of the coverage of a security scanner like Nessus or OpenVAS. Not talking about tons of exotic software where a CVE was assigned but which will never arrive in the database of a security scanner.


> Find a comparable solution without licensing by IP addresses, with powerful API, with good scanning

> quality and reasonable fixed per year price. At the moment I do not know of any solution comparable to

> Nessus in functionality. But I believe it is possible to do something similar based on OpenVAS. Interested

> in this kind of solution? Please let me know.


How about checking with F-Secure RADAR, It has all the ingredients with API and does Discovery, Internet discovery, system and web scan..I believe worth looking at.. also as mentioned by Jason, It is ASV too


I have been looking into alternatives ever since the announcement of the loss of API. We tested Rapid7 and wanted to test Tenable.io (We have a need to not store any VM data into the cloud). The main sticking point is price, either product exceeds 100K US for the scans. I am wondering if we can use Nessus Professional 7, export the data to XML and import the data into Kenna. and -security-connectors-and-rest-api/#comments


Im new into the field of consulting. Prior worked with Qualys VM/PC/WAS, etc and im very interested on Nessus Professional.

Digging on information about the new version of Nessus Pro, saw this post and have some doubts about the decision to buy it.


My purpose is to offer Vulnerability Assesments as a service to several clients. So, 1) nessus professional is the right choose? 2) Can I do external scans (facinng internet IPS) with Nessus pro? 3) Can I make o365 scans? 4) What are the things that all loose on the new version and why are so important?


My shop has been using Ness* Pro API for years now, doing security consulting and automated vulnerability scanning both on Internet and internal networks. We have decided to ditch Ness* altogeather, regardless of what they may do. Their business tactics are untrustworthy and they are all about $$$ now.


We are not worried about Greenbone closing the source on Greenbone/OpenVAS code as that is protected by GPLs, which has already been affirmed in a court of law. If they try, we or anyone, can and will sue them.


This is my personal blog. The opinions expressed here are my own and not of my employer. All product names, logos, and brands are property of their respective owners. All company, product and service names used here for identification purposes only. Use of these names, logos, and brands does not imply endorsement. You can freely use materials of this site, but it would be nice if you place a link on and send message about it at m...@avleonov.com or contact me any other way.

3a8082e126
Reply all
Reply to author
Forward
0 new messages