Vulnerability Analysis

Nessusploitable – Targeting Exploitable Nessus Vulnerabilities

Do you need to filter Nessus scan results and zero in on exploitable vulnerabilities? When you’re on a penetration test or vulnerability assessment and you have to review Nessus scan results, you can filter using Nessus or you can export a Nessus .nessus file for distrubution or offline parsing.

Nessusploitable parses .nessus files for exploitable vulnerabilities and outputs a report to stdout or file in TSV format for import to Excel. The report includes the name of the Metasploit module, if applicable.

Unfortunately the Metasploit module is the description, not the path you need to type in to use the module. This is a limitation of Nessus reporting, not this script.

To search based on Metasploit module description, enter in Metasploit search fullname:'[text from Excel sheet column]' type:exploit.

The Metasploit search results will highlight the search keywords, so just scroll and look for the result with a full match.

Requires ruby-nessus gem v2 which must be installed from GitHub:

git clone https://github.com/mephux/ruby-nessus
cd ruby-nessus/
gem build ruby-nessus.gemspec
sudo gem install ruby-nessus-2.0.beta.gem

Usage:

ruby nessusploitable.rb [options] [path]
    -p, --print                      Print to stdout and exit. Requires the -f option.
    -f, --file PATH                  File path for single file
    -d, --directory PATH             Directory path to import multiple .nessus files
    -h, --help                       Prints help
Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

SpyAI : Intelligent Malware With Advanced Capabilities

SpyAI is a sophisticated form of malware that leverages advanced technologies to capture and analyze…

3 days ago

Proxmark3 : The Ultimate Tool For RFID Security And Analysis

The Proxmark3 is a versatile, open-source tool designed for radio-frequency identification (RFID) security analysis, research,…

3 days ago

Awesome Solana Security : Enhancing Program Development

The "Awesome Solana Security" collection is a comprehensive resource designed to help developers build more…

3 days ago

IngressNightmare-POCs : Understanding The Vulnerability Exploitation Flow

The "IngressNightmare" vulnerabilities, disclosed in March 2025, represent a critical set of security issues affecting…

3 days ago

AdaptixC2 : Enhancing Penetration Testing With Advanced Framework Capabilities

AdaptixC2 is an advanced post-exploitation and adversarial emulation framework designed specifically for penetration testers. It…

3 days ago

Bincrypter : Enhancing Linux Binary Security through Runtime Encryption And Obfuscation

Bincrypter is a powerful Linux binary runtime crypter written in BASH. It is designed to…

3 days ago