> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/enumeration/nessus-scan-network-and-system.md).

# Nessus 网络与系统扫描

## **使用 Nessus 扫描：**

{% hint style="info" %}
Nessus 是一款功能强大的漏洞扫描工具，可执行深度扫描，以检测网络或 IT 基础设施中的安全漏洞。
{% endhint %}

{% embed url="<https://www.tenable.com/downloads/nessus?loginAttempted=true>" %}

* **监听端口**：Nessus 扫描将存储在 `127.0.0.1:8834`.

<figure><img src="/files/6b59ece652ca836fbded74cab0c11886efdd17dd" alt=""><figcaption></figcaption></figure>

* **扫描选项：**

Nessus 提供了广泛的可配置扫描选项，使你能够专门针对主机、服务、应用程序甚至操作系统中存在的漏洞进行扫描。这些选项可根据渗透测试或安全审计的需求进行调整。

<figure><img src="/files/b5501f6143bae1ba17a72ec00b9e0b76fa89a4e0" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/24478abb163c448781edb387b75e87378d08f4bb" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/071faee97ee0d03eb9cd162f0692926175d8ffdc" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/c8fffa7dd797e3a36667bfe871e0d6786710ca09" alt=""><figcaption></figcaption></figure>

### 导出结果到 Metasploit

一旦 Nessus 扫描完成，就可以将结果导出到 Metasploit 中进行分析和利用；Metasploit 是一个广泛使用的漏洞利用框架。

<figure><img src="/files/46dd8435756b0aa97eccb9ac0540d8f9fbacbbc7" alt=""><figcaption></figcaption></figure>

要将 Nessus 扫描导出到 Metasploit，请按以下步骤操作：

* **导出扫描：** 保存 Nessus 扫描结果文件（通常为 `.nessus` 格式）。
* **导入到 Metasploit：** 使用以下命令将 Nessus 文件导入到 Metasploit 数据库：

```bash
db_import /home/jordan/Desktop/scan.nessus
```

**查看主机信息：** 导入结果后，你可以使用以下命令获取被扫描主机的信息：

```
host 
```

<figure><img src="/files/7a54a320b8175a5eb24ca8d1de563d0f83f967fa" alt=""><figcaption></figcaption></figure>

**列出检测到的服务：** 要查看主机上发现的存在漏洞的服务，请使用以下命令：

```
services
```

<figure><img src="/files/b8703ebe2c7383520aa5bb6eab5d5a9e566cf945" alt=""><figcaption></figcaption></figure>

**查看漏洞：** 你可以使用以下命令列出所有发现的漏洞：

```
vulnerabilities
```

<figure><img src="/files/51482c1341703e0e0c07b56838fe581f4de96350" alt=""><figcaption></figcaption></figure>

**按特定端口筛选漏洞：** 要搜索某个特定端口上的漏洞（例如 SMB 的 445 端口），请使用以下命令：

<pre class="language-bash"><code class="lang-bash"><strong>vulns -p 445
</strong></code></pre>

<figure><img src="/files/f76631f0a79cb649db1cdd40e9e0c366c14e3b60" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-tools/enumeration/nessus-scan-network-and-system.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.