Do you need to filter Nessus scan results and zero in on exploitable vulnerabilities? When you’re on a penetration test or vulnerability assessment and you have to review Nessus scan results, you can filter using Nessus or you can export a Nessus .nessus file for distrubution or offline parsing.
Nessusploitable parses .nessus files for exploitable vulnerabilities and outputs a report to stdout or file in TSV format for import to Excel. The report includes the name of the Metasploit module, if applicable.
Unfortunately the Metasploit module is the description, not the path you need to type in to use the module. This is a limitation of Nessus reporting, not this script.
To search based on Metasploit module description, enter in Metasploit search fullname:'[text from Excel sheet column]' type:exploit
.
The Metasploit search results will highlight the search keywords, so just scroll and look for the result with a full match.
Requires ruby-nessus gem v2 which must be installed from GitHub:
git clone https://github.com/mephux/ruby-nessus
cd ruby-nessus/
gem build ruby-nessus.gemspec
sudo gem install ruby-nessus-2.0.beta.gem
ruby nessusploitable.rb [options] [path]
-p, --print Print to stdout and exit. Requires the -f option.
-f, --file PATH File path for single file
-d, --directory PATH Directory path to import multiple .nessus files
-h, --help Prints help
Playwright-MCP (Model Context Protocol) is a cutting-edge tool designed to bridge the gap between AI…
JBDev is a specialized development tool designed to streamline the creation and debugging of jailbreak…
The Kereva LLM Code Scanner is an innovative static analysis tool tailored for Python applications…
Nuclei-Templates-Labs is a dynamic and comprehensive repository designed for security researchers, learners, and organizations to…
SSH-Stealer and RunAs-Stealer are malicious tools designed to stealthily harvest SSH credentials, enabling attackers to…
Control flow flattening is a common obfuscation technique used by OLLVM (Obfuscator-LLVM) to transform executable…