Audit versions of MSSQL (credentialed check)

mssql_version_audit.py

#!/usr/bin/python3

import xml.etree.ElementTree as ET
import argparse
import re

parser = argparse.ArgumentParser()
parser.add_argument("nessusfile")
args = parser.parse_args()


nessus = ET.parse(args.nessusfile)
nessusroot = nessus.getroot()

for host in nessusroot.iter('ReportHost'):
    hostname = host.attrib["name"]
    ip = "Unknown"
    netbios = "Unknown"
    os = "Unknown"
    
    for tag in host.iter('tag'):
        if tag.attrib['name'] == 'operating-system':
            os = tag.text
        if tag.attrib['name'] == 'host-ip':
            ip = tag.text
        if tag.attrib['name'] == 'netbios-name':
            netbios = tag.text   
    for vuln in host.iter('ReportItem'):

        if vuln.attrib['pluginName'] == 'Microsoft SQL Server Detection (credentialed check)':
            output = vuln.find('plugin_output').text
            matches = re.findall("Version[\t ]+:[\t ](.*)",output)
            #for match in matches:
            recommended = "N/A" 
            if len(matches) == 2:
                recommended = matches[1]
            print("{}|{}|{}|{}|{}|{}".format(hostname,netbios,ip,os,matches[0],recommended))