Vulnerability Analysis

Nessusploitable – Targeting Exploitable Nessus Vulnerabilities

Do you need to filter Nessus scan results and zero in on exploitable vulnerabilities? When you’re on a penetration test or vulnerability assessment and you have to review Nessus scan results, you can filter using Nessus or you can export a Nessus .nessus file for distrubution or offline parsing.

Nessusploitable parses .nessus files for exploitable vulnerabilities and outputs a report to stdout or file in TSV format for import to Excel. The report includes the name of the Metasploit module, if applicable.

Unfortunately the Metasploit module is the description, not the path you need to type in to use the module. This is a limitation of Nessus reporting, not this script.

To search based on Metasploit module description, enter in Metasploit search fullname:'[text from Excel sheet column]' type:exploit.

The Metasploit search results will highlight the search keywords, so just scroll and look for the result with a full match.

Requires ruby-nessus gem v2 which must be installed from GitHub:

git clone https://github.com/mephux/ruby-nessus
cd ruby-nessus/
gem build ruby-nessus.gemspec
sudo gem install ruby-nessus-2.0.beta.gem

Usage:

ruby nessusploitable.rb [options] [path]
    -p, --print                      Print to stdout and exit. Requires the -f option.
    -f, --file PATH                  File path for single file
    -d, --directory PATH             Directory path to import multiple .nessus files
    -h, --help                       Prints help
Tamil S

Tamil has a great interest in the fields of Cyber Security, OSINT, and CTF projects. Currently, he is deeply involved in researching and publishing various security tools with Kali Linux Tutorials, which is quite fascinating.

Recent Posts

The Arsenal : A Comprehensive Guide To Anti-Forensic Tools And Techniques

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything…

22 hours ago

AvillaForensics 3.6 – Redefining Digital Forensics

Avilla Forensics is located in first place in the award international Forensics 4:Cast, in the…

22 hours ago

Estensioni Chrome OSINT : Harnessing The Power Of Google Chrome For Open-Source Intelligence

Comprehensive guide to leveraging Google Chrome's extensions for Open-Source Intelligence (OSINT) tasks. In this article,…

22 hours ago

Analisi-Digital-Forense : Un’Esplorazione Delle Distribuzioni Linux E Delle Tecniche Forensi Digitali

Embark on a journey into the realm of digital forensics with our exploration of 'Analisi-Digital-Forense.…

23 hours ago

OSINT-FORENSICS-MOBIL E: The Digital Trails With A Comprehensive Guide

The intersection of intelligence, investigation, and mobility. In this comprehensive guide, we delve into the…

23 hours ago

Tookie-osint : A Powerful Tool For OSINT Enthusiasts

Tookie-osint has a simple-to-use UI and is really straightforward. The main idea of Tookie-osint is…

2 days ago