I personally like having access to all the data. There is also a remarked out section with some notes, if you only want to parse out vulnerabilities with CVSS scores (so non info data).

I instead have done it in python, modifying a script I found that was not completely functional, reworking it to use import the CSV feature and output everything into a single CSV file. We had been using a perl script from years ago to create a multi-page Excel file. Once that was done, I turned my mind to parsing the raw nessus file, which is XML into an easy to read format (nessus_parser.py). This script will show you information so you can grab just one scan, or all scans if you have multiple ones set up. It was a great way to get to understand how to use API keys to access the Nessus scanner. I decided it was about time to do it through API keys so I rewrote the generic script we already head to use them. We had been using one for our local scanner that required username and password. These are no real big deal, but might be able to help some of you out.

+ FullyQualifiedErrorId : WebCmdletWebResponseException, have been working on some Python scripting over the past couple months for Nessus Pro, which I have been playing with.

+ CategoryInfo : InvalidOperation: (:HttpWebRequest), WebException.

Invoke-RestMethod : The underlying connection was closed: An unexpected error occurred on a send. Invoke-RestMethod -Uri ' -Method Get -Headers = 'token='+$Session.token}Įrror I'm receiving after the initial call is successfull to grab a token: $Session=Invoke-RestMethod -Uri ' -Method POST -Body | ConvertTo-Json) -ContentType 'application/json' What I have(just trying to dump scan data for testing before I move forward in my efforts): I will post a few lines and respond with any information I can to try and resolve this (it is driving me crazy as it worked previously). So, currently I am stuck where I can grab a token, but can't get any other calls to work (previously I have been able to query the API, pull down data, and put data on the server, but it is no longer working). I know there are tools out there on Github I could use, but prefer to learn the craft a bit myself right now. I'm trying to just simply interact with the API and try to leverage it for pulling out reports (and learning how to use APIs and PowerShell is a bonus too!). I am new to PowerShell, API usage, but am fairly familiar with Nessus.

How to use nessus api