saint-graves/sica-fondt
1
0
Fork 0
mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 16:40:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
sica-fondt/knowledge/cyber-skills/skills/scanning-infrastructure-with-nessus/assets/template.md
Claude 24f816b6a3
Consolidate 22 sibling repos into layered organism structure 
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2026-06-10 06:53:01 +00:00

3.6 KiB
Raw Blame History

Nessus Infrastructure Scan Report Template

Scan Information

Field Value
Scan Name [SCAN_NAME]
Scan Date [YYYY-MM-DD HH:MM]
Scanner Tenable Nessus Professional [VERSION]
Policy [POLICY_NAME]
Target Range [TARGET_CIDR]
Scan Type Authenticated / Unauthenticated
Duration [HH:MM:SS]

Executive Summary

This vulnerability assessment identified [TOTAL] findings across [HOST_COUNT] hosts in the [ENVIRONMENT] environment. The scan was conducted on [DATE] using [AUTHENTICATED/UNAUTHENTICATED] scanning with the [POLICY] scan policy.

Severity Distribution

Severity Count Percentage
Critical [N] [%]
High [N] [%]
Medium [N] [%]
Low [N] [%]
Informational [N] [%]
Total [N] 100%

Key Metrics

  • Unique CVEs Identified: [N]
  • Exploitable Vulnerabilities: [N]
  • Hosts with Critical Findings: [N]
  • Average CVSS Score: [N.N]

Critical and High Findings

Finding 1: [PLUGIN_NAME]

  • Plugin ID: [NESSUS_PLUGIN_ID]
  • Severity: Critical / High
  • CVSS Score: [N.N]
  • CVE: [CVE-YYYY-NNNNN]
  • Affected Hosts: [COUNT]
  • Synopsis: [Brief description of the vulnerability]
  • Impact: [Description of potential impact if exploited]
  • Solution: [Recommended remediation steps]
  • Affected Systems:
    Host IP Address Port Service
    [hostname] [IP] [port] [service]

Finding 2: [PLUGIN_NAME]

[Repeat structure for each critical/high finding]

Remediation Priorities

Immediate (0-48 hours)

  1. [Critical finding requiring immediate patching]
  2. [Exploitable vulnerability with public PoC]

Short-term (1-2 weeks)

  1. [High severity findings with available patches]
  2. [Configuration weaknesses with easy remediation]

Medium-term (30 days)

  1. [Medium severity findings]
  2. [Hardening recommendations]

Long-term (90 days)

  1. [Architecture improvements]
  2. [Legacy system migration plans]

Host Risk Rankings

Rank Hostname IP Address OS Risk Score Critical High Medium
1 [host] [IP] [OS] [score] [N] [N] [N]
2 [host] [IP] [OS] [score] [N] [N] [N]

Scan Coverage

Successfully Scanned

  • Total targets: [N]
  • Successfully scanned: [N]
  • Credentialed checks successful: [N]

Scan Gaps

  • Unreachable hosts: [N] - [list IPs]
  • Authentication failures: [N] - [list IPs]
  • Scan timeouts: [N] - [list IPs]

Trending (if applicable)

Metric Previous Scan Current Scan Change
Critical [N] [N] [+/-N]
High [N] [N] [+/-N]
Medium [N] [N] [+/-N]
Total Findings [N] [N] [+/-N]
Mean Time to Remediate [N days] [N days] [+/-N]

Appendices

A. Scan Configuration

  • Port Range: [1-65535 / Common Ports]
  • Plugin Families Enabled: [List families]
  • Credentials Used: [SSH / WinRM / SNMP / Database]
  • Excluded Hosts: [List if applicable]

B. Methodology

This assessment follows NIST SP 800-115 guidelines for vulnerability scanning. Scans were performed with [authenticated/unauthenticated] access using Nessus Professional with current plugin feed.

C. Disclaimers

  • This scan represents a point-in-time assessment
  • New vulnerabilities may be discovered after this scan
  • False positives may exist; manual verification is recommended for critical findings
  • Scan coverage may be affected by network segmentation and firewall rules