Provided by: libparse-nessus-nbe-perl_1.1-1_all bug


       Parse::Nessus::NBE - use to extract specific data from Nessus NBE files


               use Parse::Nessus::NBE;




       This module is designed to extract information from Nessus NBE files. Functions have been
       designed to return certain sets of data, such as service banners and OS versions. Other
       functions have been provided that will return more specific information, such as all IPs
       listening on a given port or all IPs associated with a specified plugin id.


       To obtain a list of banners

               my @banners =  nbanners(@nessusdata);
               print @banners;

               # returns
               IP|service banner

               # example
     |Apache/1.3.26 (Unix) mod_perl/1.24
     |220 cpan01 FTP server (SunOS 5.8) ready.
     |NetWare HTTP Stack
     |220 Service ready for new user.

       To query by port

               my $port = 80;
               my @ports = nports(@nessusdata,$port);
               print @ports;

               # returns
               IP|specified port

               # example
     |ssh (22/tcp)
     |ssh (22/tcp)
     |ssh (22/tcp)
     |ssh (22/tcp)
     |ssh (22/tcp)

       To obtain a list of web directories

               my @webdirs = nwebdirs(@nessusdata);
               print @webdirs;

               # returns
               IP|web port|web dir(s)|web dir(s) requiring authentication

               # example
     |http (80/tcp)|/css /design /downloads /images /js
     |http (80/tcp)|/images /public|/console
     |https (443/tcp)|/files /html /images /js /jsp
     |https (443/tcp)|/application /common /images /report|/printers
     |http (80/tcp)|/admin

       To obtain a list of nfs shares

               my @nfs = nnfs(@nessusdata);
               print @nfs;

               # returns
               IP|nfs port|nfs share(s)

               # example
     |nfs (2049/tcp)|/apps (mountable by everyone)
     |nfs (2049/tcp)|/cdrom (mountable by everyone)
     |nfs (2049/tcp)|/data (mountable by everyone)
     |nfs (2049/tcp)|You are running a superfluous NFS daemon...
     |nfs (2049/tcp)|You are running a superfluous NFS daemon...

       To obtain a OS listing

               my @os = nos(@nessusdata);
               print @os;

               # returns
               IP|OS version

               # example
     |IOS 12.1.5-12.2(6a), Cisco IOS 12.1(5)-12.2(7a)
     |Linux 2.1.19 - 2.2.20
     |HP Advancestack Etherswitch 224T or 210
     |AIX 4.2-4.3.3
     |NT Server 4.0 SP4-SP5 running Checkpoint Firewall-1

       To obtain a listing of SNMP community strings

               my @snmp = nsnmp(@nessusdata);
               print @snmp;

               # returns
               IP|SNMP community string(s)

               # example
     |private public
     |private public
     |private public

       To query by plugin id

               my $plugin = 10667;
               my @plugin = nplugin(@nessusdata,$plugin);
               print @plugin;

               # returns
               IP|port|plugin data

               # example
     |https (443/tcp)|...OpenSSL which is;older than 0.9.6e...
     |https (443/tcp)|...OpenSSL which is;older than 0.9.6e...
     |https (443/tcp)|...OpenSSL which is;older than 0.9.6e...
     |https (443/tcp)|...OpenSSL which is;older than 0.9.6e...
     |https (443/tcp)|...OpenSSL which is;older than 0.9.6e...

       To obtain a OS count, useful for graphing

               my @countos = nstatos(nessusdata);
               print @countos;

               # returns
               OS version|count

               # example
               Windows NT4 or 95/98/98SE|17
               Windows 2000 Advanced Server SP3|14
               TOPS-20 Monitor 7(21733),KL-10 (DEC 2065)|11
               Cisco router running IOS 12.1.5-12.2.13a|11
               PS2 Linux 1.0|9
               Linux 2.4.17 on HP 9000 s700|7
               Cisco 2620 running IOS 12.1(6)|6
               Windows 2000 Server SP3|5
               Windows NT4 Workstation SP6a|4
               Nortel/Alteon ACE Director 3 Version 6.0.42-B|4

       To obtain a service count, useful for graphing

               my @countservices = nstatservices(nessusdata);
               print @countservices;

               # returns
               service port|count

               http (80/tcp)|69
               telnet (23/tcp)|48
               netbios-ssn (139/tcp)|48
               https (443/tcp)|46
               loc-srv (135/tcp)|42
               ftp (21/tcp)|39
               smtp (25/tcp)|34
               pcanywheredata (5631/tcp)|30
               ssh (22/tcp)|25
               sun-answerbook (8888/tcp)|22

       To obtain a vulnerability count, useful for graphing

               # note: options are as follows:
               # 1 returns high severity vulnerabilties
               # 2 returns medium severity vulnerabilities
               # 3 returns low level security notes

               my @countvulns = nstatvulns(@nessusdata,1);
               print @countvulns;

               plugin id|count



       David J Kyger <>


       Gwendolynn ferch Elydyr <>


       Copyright 2003 David J Kyger. All rights reserved.

       This library is free software; you can redistribute it and/or modify it under the same
       terms as Perl itself.