To upload Nmap report, go to Upload Reports and choose Nmap report. Its a result importer module, which can read the results from an existing Nmap.xml report file and can import the findings in our custom database, and further use these findings in order to launch test cases/service scan. Thus, this leaves the user with the flexibility to use our tool in both modes:
- Discovery and service scanning together
- Service scanning mode alone
On clicking on Upload, the report will be parsed and uploaded. A user may go to Current scans tab and would find the uploaded project test_upload_nmap listed over there, with its Discovery status as Complete and Service scanning status as Incomplete. A user may click upon Action tab Ongoing and can reconfigure the results and then start service scanning.
- Qualys and Nessus report parsers
To use this option, go to Upload reports tab and select either Qualys/Nessus report. We have a report merging module, which would merge the results obtained from Qualys, Nessus and manual test cases. In order to merge the reports, they have to be parsed first. We have Qualys, Nmap and Nessus report parsers. All of them will take a report in XML format and would parse the report and place it in local storage so that querying and integrating the results with other reports becomes easier:
- Report merger:
To use this option go to Merge reports tab and select the ID/Name of the manual project with which you wish to integrate the Qualys and Nessus results.
It assumes that the Nessus and Qualys reports would have already been uploaded and linked to the project with which they are meant to be merged.
This module merges the manual test cases, parsed Qualys report, parsed Nessus report and would also map the CVEs to exploits and finally, would provide the user an option to download the integrated reports in any of the format among (XML, HTML, CSV, JSON) thus providing one consolidated view for analysis.
The final downloadable report is available in four formats (HTML, CSV, JSON, XML).
The merged report will do the merging based upon common results found in Nessus/Qualys and manual test_cases. It will cluster the common host and port into one group in such a way that analysis becomes easier.