DefectDojo/django-DefectDojo

Netsparker Scan XML importing Issue

ekondur opened this issue · 1 comments

Hi, I am Emrah from the Invicti team.

There is an issue when importing a Netspaker Scan in XML format. I can import the same report in JSON format without any problem.

Exception Message:
An exception error occurred during the report import: ['Expecting value: line 1 column 1 (char 0)']

image

Attached scan files. scan-files.zip

@ekondur Looking at the Netsparker parser, there's two things to note:

  1. The parser is only written for the JSON output - here's the unit test files the project uses to test Netsparker
  2. Netsparker has been renamed to Invicti - see here.

If you or another community member would like to extend the existing parser to support XML, we'll be happy to take the PR. However, I'm unsure if the "new" Invicti scanner outputs XML so it may have limited use. The Invicti parser only handles JSON scan files in it's current version.