nessus file analyzer (NFA)

nessus file analyzer (NFA) by LimberDuck (pronounced ˈlɪm.bɚ dʌk) is a GUI tool which enables you to parse multiple nessus files containing the results of scans performed by using Tenable Nessus and Tenable Security Center, and exports parsed data to a spreadsheet file for effortless analysis.

Operational memory usage will be kept low while parsing even the largest of files. You can run it on your favourite operating system, whether it is Windows, macOS or GNU Linux. As a parsing result, you will receive spreadsheets with a summary view of the whole scan and/or all reported hosts. You will also be able to generate spreadsheets with a detailed view of all reported vulnerabilities and/or noncompliance. It's free and open source tool, which has been created to automate our work, decrease our workload and focus on data analysis.

[!NOTE] Visit LimberDuck.org to find out more!

Main features

• select one or more nessus files at once or select directory to get all nessus files from it and from all its subdirectories
• select one or more of standard report types like:
  • scan,
  • host,
  • vulnerabilities,
  • noncompliance
• generate advanced reports like software enumeration
• change target directory for output file to desired one, leave it default (current working directory) or set to be the same as source files
• add suffix for output file with _YYYYMMDD_HHMMSS and/or custom text

Installation

[!TIP] You don’t need to install Python, install nessus file analyzer (NFA), or build it yourself. Just go to GitHub Releases and download the latest version of nessus file analyzer (NFA), ready to run on Windows, macOS, and Linux.

[!NOTE] It's advisable to use python virtual environment for below instructions. Read more about python virtual environment in The Hitchhiker’s Guide to Python!

Read about virtualenvwrapper in The Hitchhiker’s Guide to Python!: virtualenvwrapper provides a set of commands which makes working with virtual environments much more pleasant.

1. Install nessus file analyzer (NFA)

   pip install nessus-file-analyzer

   To upgrade to newer version run:

   pip install -U nessus-file-analyzer

2. Run nessus file analyzer (NFA)

   nessus-file-analyzer

   Optionally for Linux and macOS:

   nessus-file-analyzer&

   Run with & at the end to start the process in the background.

3. Make a shortcut for nessus file analyzer (NFA)

   Windows:

   • Run in cmd where nessus-file-analyzer.exe
   • Copy returned path.
   • Go to e.g. to Desktop.
   • Right click on Desktop and choose New > Shortcut.
   • Paste returned path.
   • Click Next, Finish.

   Linux (Ubuntu) / macOS

   • Run in Terminal which nessus-file-analyzer
   • Run in Terminal ln -s path_returned_in_previous_command ~/Desktop/

   macOS

   • Run in Terminal which nessus-file-analyzer
   • Open bin folder where nessus-file-analyzer is located.
   • Right click on nessus-file-analyzer and choose Make alias.
   • Move your alias e.g. to Desktop.

Meta

Change log

See CHANGELOG.

Licence

GNU GPLv3: LICENSE.

Authors

Damian Krawczyk created nessus file analyzer (NFA) by LimberDuck.