Garrett Gee

On a recent engagement, I noticed that people were wasting time scrolling through nessus reports to find vulnerabilities in which they either need to confirm, or dig into deeper. There were many findings that would automatically be written up because there is nothing to further exploit, and the supporting information in the output was good [...]

I’m not sure about you, but I hate how Nessus generates HTML reports. While reviewing the report I find myself having to remember what IP I am looking at, and spend too much time scrolling back up the report because of my short memory. Also, none of the ports identified as having a web server [...]