packetchaos/navi_was_reports repository overview

⁠navi_was_reports

Tenable WAS reporting solution using Flask

*** This tool is not an officially supported Tenable project ***

*** Use of this tool is subject to the terms and conditions identified below,
and is not subject to any license agreement you may have with Tenable ***

⁠Why?

You may be required to produce long form PDFs to your stake holders based on a Web Application Scan or a group of scans. This PoC demonstrates how you can use Flask, SQLlite and the Tenable.io API to create a simple reporting solution. It has been designed for printing in PDF.

⁠Deployment Options

• Use Docker to run as a Service "-d" detatched
• Use Docker in interactive mode "-it" to run in a temporary fashion
• Run as a Python script for one-time reporting

⁠Use Docker:

⁠Install Docker

Follow the Docker Documentation for your Chosen OS:

https://docs.docker.com/get-docker/

⁠Pull the Docker container

docker pull packetchaos/navi_was_reports

⁠Run the Docker Container.

Replace <access Key> and <secret key> with your Tenable.io API keys.

docker run -it -e access_key=<access key> -e secret_key=<secret key> -e <days to limit> -p 5004:5004 packetchaos/navi_was_reports

⁠Run Using Python

⁠Install All of the required packages and libraries

Python 3.6+
Git
python requests lib
python flask lib

⁠Install Python 3.6 or greater.

Follow the Python Documentation for your chosen OS:

https://www.python.org/downloads/

⁠Install Git

Follow the Python Documentation for your chosen OS:

https://git-scm.com/downloads

⁠Install Python Libraries

pip3 install requests
pip3 install flask

⁠Clone the repository

git clone https://github.com/packetchaos/navi_was_reports.git

⁠Run the Script

python3 ./was_report_gen.py <access_key> <secret_key> <days_to_limit>