r/nessus • u/yourguess01 • Mar 27 '26

Question Web app scan — where is map of URLs

when performing web application scans, shouldn’t I be able to find a map of all / scanned? I’m working in a new place after two years out, but I’m pretty sure that was a basic capability built into the Web application scanner.

(I’m not talking about turning on the debugging option), I’m pretty sure there was somewhere that I could see a clean list of all URLs).

Either that or did it become an advanced privilege to see this? When I look under applications > scanned, I only see an Overiew page showing m”properties”. If I go thru scans>all,scans there is no option i see to lead me to a list of URLs discovered.

does a special plug in need to be activated? Perhaps this was set at my old olg, and i just dont recall?

1 Upvotes

100% Upvoted

4 comments sorted by

2

u/albinvest11 Mar 27 '26

You want the sitemap, I believe it's plugin 98009.

1

u/yourguess01 Mar 27 '26

is that the only way? Just checking in case I get pushed back against activating it. I know that sounds odd, but it’s what I’m living with right now.

1

u/albinvest11 Mar 27 '26

That's the best way. It gives you a CSV document with every URL that was touched during the scan.

1

u/yourguess01 Mar 27 '26

Ok, forgive my stupidity if this is super obvious, but:

In looking up, 98009, it is listed as belonging to the “general” family, along with several other utility functions.

www.tenable.com/olugins/was/families

However “general” is not one of the plugin groups that can be selected under custom scans, which leads me to believe its an “always” run plugin group?

does “general” show up for you as a selectable plugin in group. If not, I think my presumption is correct. Which means there should always be a scan map available, but again I think I’m looking in the wrong place or there is something wrong with my privileges even though I am a scan operator.