NessusParser

A tool to create a vulnerability assessment document from a Nessus' csv file

Modules

In order to run the script you must install python-docx module.

Using the command: pip3 install python-docx.

Usage

python3 NessusParser.py path/to/csv-files

Where path/to/csv-files is a folder containig the csv-formatted result of a Nessus' scan, in order to create one or more of these files you should see How to create a scan report in Nessus.

The script will do the following actions:

• takes all the files in the folder "path/to/csv-files"
• magically convert every single file into word format
  • if this is not possible, the program writes an error.log file containing the defective file(s) name.
• insert them into a copy of the template.docx** file
• asks you where to save the copy (the default name will be "result.docx")

** If you want to use a different template file you must consider these aspects:

• The file "template.docx" must be into the same folder as the program.
  • it must contain a string named [VULNS HERE] inside the document
• the "High", "Critical" and "Medium" Word styles must be present in the template document, if they are not, you must create them.

By default, the program generates the error file into its own folder.

Please note: the resulting document will not be pretty, if you want to make it presentable for a client you must edit it by yourself.