This talk focused on the latest Nessus reporting format, and how to use it in your own project. Consuming XML and making sense of the data. WE also discussed about ways to eliminate false positives and multiple entries pointing to same issue.
Abstract
- 15 minutes on Details of Various nessus reporting format and how they work internally. specifically how to write your own xml/html content.
- How to write parsing logic and how to crunch tons of reports in easiest manner. (PHP).
- Discussion on various reports and vulnerability reclassification related issues encountered.
- Demo of parsing logic in PHP. which could easily be converted into any language.