mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 16:40:24 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
58 lines
1.9 KiB
Markdown
58 lines
1.9 KiB
Markdown
# API Reference: Scanning Infrastructure with Nessus
|
|
|
|
## Nessus REST API Endpoints
|
|
|
|
| Method | Endpoint | Description |
|
|
|--------|----------|-------------|
|
|
| POST | `/session` | Authenticate and get token |
|
|
| GET | `/scans` | List all scans |
|
|
| POST | `/scans` | Create new scan |
|
|
| POST | `/scans/{id}/launch` | Launch a scan |
|
|
| GET | `/scans/{id}` | Get scan results |
|
|
| POST | `/scans/{id}/export` | Export scan results |
|
|
| GET | `/scans/{id}/export/{fid}/status` | Check export status |
|
|
| GET | `/scans/{id}/hosts/{hid}` | Get host details |
|
|
|
|
## Scan Types
|
|
|
|
| Type | Template UUID | Use Case |
|
|
|------|--------------|----------|
|
|
| Basic Network Scan | `ab4bacd2-...` | Standard vulnerability scan |
|
|
| Advanced Scan | `ad629e16-...` | Custom plugin selection |
|
|
| Credentialed Patch Audit | `0c3a6b1f-...` | Authenticated patch check |
|
|
| Web Application Tests | `1c35d5a5-...` | Web vulnerability scan |
|
|
| Compliance Audit | `bbd4f805-...` | CIS/STIG/PCI checks |
|
|
|
|
## Severity Levels
|
|
|
|
| Level | Value | CVSS Range | SLA |
|
|
|-------|-------|-----------|-----|
|
|
| Critical | 4 | 9.0 - 10.0 | Immediate |
|
|
| High | 3 | 7.0 - 8.9 | 7-14 days |
|
|
| Medium | 2 | 4.0 - 6.9 | 30 days |
|
|
| Low | 1 | 0.1 - 3.9 | Next window |
|
|
| Info | 0 | N/A | No action |
|
|
|
|
## Export Formats
|
|
|
|
| Format | Description |
|
|
|--------|-------------|
|
|
| `nessus` | XML format for import into other tools |
|
|
| `csv` | Comma-separated for spreadsheet analysis |
|
|
| `html` | Human-readable HTML report |
|
|
| `pdf` | Formatted PDF report |
|
|
|
|
## Python Libraries
|
|
|
|
| Library | Version | Purpose |
|
|
|---------|---------|---------|
|
|
| `requests` | >=2.28 | Nessus REST API calls |
|
|
| `json` | stdlib | Parse API responses |
|
|
| `urllib3` | >=1.26 | SSL warning suppression |
|
|
|
|
## References
|
|
|
|
- Nessus REST API: https://developer.tenable.com/reference/navigate
|
|
- Tenable Documentation: https://docs.tenable.com/nessus/
|
|
- Nessus CLI: https://docs.tenable.com/nessus/Content/NessusCLI.htm
|