> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/hacking-tools/enumeration/nessus-scan-network-and-system.md). # Nessus Network and System Scanning Nessus vulnerability scanning notes for network, host, service, application, and operating system assessment. ## **Scan with Nessus:** {% hint style="info" %} Nessus is a powerful vulnerability scanning tool that performs in-depth scans to detect security vulnerabilities within a network or IT infrastructure. {% endhint %} {% embed url="" %} * **Listening port**: The Nessus scan will be stored on `127.0.0.1:8834`.

* **Scan Options:** Nessus offers a wide range of configurable scanning options, allowing you to specifically target vulnerabilities present on hosts, services, applications or even operating systems. These options can be adjusted according to the needs of the penetration test or security audit.

### Export Results to Metasploit Once the Nessus scan is completed, it is possible to export the results for analysis and exploitation in Metasploit, a popular framework for exploiting vulnerabilities.

To export the Nessus scan to Metasploit, follow these steps: * **Export scan:** Save the Nessus scan results file (usually in `.nessus` format). * **Import into Metasploit:** Use the following command to import the Nessus file into the Metasploit database: ```bash db_import /home/jordan/Desktop/scan.nessus ``` **View host information:** Once the results are imported, you can obtain information about the scanned hosts with the following command: ``` host ```

**List detected services:** To view vulnerable services found on hosts, use the command: ``` services ```

**View vulnerabilities:** You can list all discovered vulnerabilities using the command: ``` vulnerabilities ```

**Filter vulnerabilities by specific port:** To search for vulnerabilities on a particular port (for example, port 445 for SMB), use the command:

vulns -p 445

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://hacking-notes.jord4n.pro/hacking-tools/enumeration/nessus-scan-network-and-system.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.