> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/enumeration/nessus-scan-network-and-system.md). # Nessus 网络与系统扫描 Nessus 漏洞扫描笔记，适用于网络、主机、服务、应用程序和操作系统评估。 ## **使用 Nessus 扫描：** {% hint style="info" %} Nessus 是一款强大的漏洞扫描工具，可执行深入扫描以检测网络或 IT 基础设施中的安全漏洞。 {% endhint %} {% embed url="" %} * **监听端口**：Nessus 扫描将存储在 `127.0.0.1:8834`.

* **扫描选项：** Nessus 提供了广泛的可配置扫描选项，使您能够专门针对主机、服务、应用程序甚至操作系统中存在的漏洞。这些选项可根据渗透测试或安全审计的需要进行调整。

### 将结果导出到 Metasploit 一旦 Nessus 扫描完成，就可以将结果导出到 Metasploit 中进行分析和利用；Metasploit 是一个流行的漏洞利用框架。

要将 Nessus 扫描导出到 Metasploit，请按照以下步骤操作： * **导出扫描：** 保存 Nessus 扫描结果文件（通常为 `.nessus` 格式）。 * **导入到 Metasploit：** 使用以下命令将 Nessus 文件导入到 Metasploit 数据库： ```bash db_import /home/jordan/Desktop/scan.nessus ``` **查看主机信息：** 导入结果后，您可以使用以下命令获取有关已扫描主机的信息： ``` host ```

**列出检测到的服务：** 要查看在主机上发现的存在漏洞的服务，请使用以下命令： ``` services ```

**查看漏洞：** 您可以使用以下命令列出所有发现的漏洞： ``` vulnerabilities ```

**按特定端口筛选漏洞：** 要搜索特定端口上的漏洞（例如 SMB 的 445 端口），请使用以下命令：

vulns -p 445

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://hacking-notes.jord4n.pro/zh/hacking-tools/enumeration/nessus-scan-network-and-system.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.