Nessus
Last updated
Was this helpful?
Last updated
Was this helpful?
AppSec Portal Importer Name: Nessus
applications:
Scan servers, workstations and network devices for vulnerabilities and misconfigurations.
Cloud assets: Scan virtual machines and containers on cloud platforms such as AWS, Azure and Google Cloud.
Web applications: Detect web application vulnerabilities such as SQL injection and cross-site scripting (XSS).
Domains: Scan domains to identify web configuration and security vulnerabilities.
In this command, the following parameters are used:
-X POST
: specifies the HTTP method to be used (in this case, POST)
-H "Authorization: Token <authorization_token>"
: specifies the obtained from AppSec Portal.
-H "Content-Type: multipart/form-data"
: specifies the content type of the request.
-F "file=@<report_file_path>"
: specifies the path to the report file generated by the scanner.
-F "product_name=<product_name>"
: specifies the name of the product being scanned.
-F "product_type=<product_type>"
: specifies the type of the product being scanned.
-F "scanner_name=<scanner_name>"
: specifies the name of the scanner used to generate the report (Nessus)
-F "branch=<branch_name>"
: (optional) specifies the name of the branch in the source code repository (if applicable) This parameter is particularly useful when you want to associate the scan results with a specific branch in your repository. If not provided, the scan will be associated with the default branch