mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 16:40:24 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
116 lines
3.6 KiB
Markdown
116 lines
3.6 KiB
Markdown
# Nessus Infrastructure Scan Report Template
|
|
|
|
## Scan Information
|
|
| Field | Value |
|
|
|-------|-------|
|
|
| Scan Name | [SCAN_NAME] |
|
|
| Scan Date | [YYYY-MM-DD HH:MM] |
|
|
| Scanner | Tenable Nessus Professional [VERSION] |
|
|
| Policy | [POLICY_NAME] |
|
|
| Target Range | [TARGET_CIDR] |
|
|
| Scan Type | Authenticated / Unauthenticated |
|
|
| Duration | [HH:MM:SS] |
|
|
|
|
## Executive Summary
|
|
|
|
This vulnerability assessment identified **[TOTAL]** findings across **[HOST_COUNT]** hosts in the **[ENVIRONMENT]** environment. The scan was conducted on [DATE] using [AUTHENTICATED/UNAUTHENTICATED] scanning with the [POLICY] scan policy.
|
|
|
|
### Severity Distribution
|
|
| Severity | Count | Percentage |
|
|
|----------|-------|------------|
|
|
| Critical | [N] | [%] |
|
|
| High | [N] | [%] |
|
|
| Medium | [N] | [%] |
|
|
| Low | [N] | [%] |
|
|
| Informational | [N] | [%] |
|
|
| **Total** | **[N]** | **100%** |
|
|
|
|
### Key Metrics
|
|
- **Unique CVEs Identified**: [N]
|
|
- **Exploitable Vulnerabilities**: [N]
|
|
- **Hosts with Critical Findings**: [N]
|
|
- **Average CVSS Score**: [N.N]
|
|
|
|
## Critical and High Findings
|
|
|
|
### Finding 1: [PLUGIN_NAME]
|
|
- **Plugin ID**: [NESSUS_PLUGIN_ID]
|
|
- **Severity**: Critical / High
|
|
- **CVSS Score**: [N.N]
|
|
- **CVE**: [CVE-YYYY-NNNNN]
|
|
- **Affected Hosts**: [COUNT]
|
|
- **Synopsis**: [Brief description of the vulnerability]
|
|
- **Impact**: [Description of potential impact if exploited]
|
|
- **Solution**: [Recommended remediation steps]
|
|
- **Affected Systems**:
|
|
| Host | IP Address | Port | Service |
|
|
|------|-----------|------|---------|
|
|
| [hostname] | [IP] | [port] | [service] |
|
|
|
|
### Finding 2: [PLUGIN_NAME]
|
|
[Repeat structure for each critical/high finding]
|
|
|
|
## Remediation Priorities
|
|
|
|
### Immediate (0-48 hours)
|
|
1. [Critical finding requiring immediate patching]
|
|
2. [Exploitable vulnerability with public PoC]
|
|
|
|
### Short-term (1-2 weeks)
|
|
1. [High severity findings with available patches]
|
|
2. [Configuration weaknesses with easy remediation]
|
|
|
|
### Medium-term (30 days)
|
|
1. [Medium severity findings]
|
|
2. [Hardening recommendations]
|
|
|
|
### Long-term (90 days)
|
|
1. [Architecture improvements]
|
|
2. [Legacy system migration plans]
|
|
|
|
## Host Risk Rankings
|
|
|
|
| Rank | Hostname | IP Address | OS | Risk Score | Critical | High | Medium |
|
|
|------|----------|-----------|-----|------------|----------|------|--------|
|
|
| 1 | [host] | [IP] | [OS] | [score] | [N] | [N] | [N] |
|
|
| 2 | [host] | [IP] | [OS] | [score] | [N] | [N] | [N] |
|
|
|
|
## Scan Coverage
|
|
|
|
### Successfully Scanned
|
|
- Total targets: [N]
|
|
- Successfully scanned: [N]
|
|
- Credentialed checks successful: [N]
|
|
|
|
### Scan Gaps
|
|
- Unreachable hosts: [N] - [list IPs]
|
|
- Authentication failures: [N] - [list IPs]
|
|
- Scan timeouts: [N] - [list IPs]
|
|
|
|
## Trending (if applicable)
|
|
|
|
| Metric | Previous Scan | Current Scan | Change |
|
|
|--------|--------------|--------------|--------|
|
|
| Critical | [N] | [N] | [+/-N] |
|
|
| High | [N] | [N] | [+/-N] |
|
|
| Medium | [N] | [N] | [+/-N] |
|
|
| Total Findings | [N] | [N] | [+/-N] |
|
|
| Mean Time to Remediate | [N days] | [N days] | [+/-N] |
|
|
|
|
## Appendices
|
|
|
|
### A. Scan Configuration
|
|
- Port Range: [1-65535 / Common Ports]
|
|
- Plugin Families Enabled: [List families]
|
|
- Credentials Used: [SSH / WinRM / SNMP / Database]
|
|
- Excluded Hosts: [List if applicable]
|
|
|
|
### B. Methodology
|
|
This assessment follows NIST SP 800-115 guidelines for vulnerability scanning. Scans were performed with [authenticated/unauthenticated] access using Nessus Professional with current plugin feed.
|
|
|
|
### C. Disclaimers
|
|
- This scan represents a point-in-time assessment
|
|
- New vulnerabilities may be discovered after this scan
|
|
- False positives may exist; manual verification is recommended for critical findings
|
|
- Scan coverage may be affected by network segmentation and firewall rules
|