Tools & Commands · Ethical Hacking Tools
Nessus
Vulnerability scanning · Intermediate
A commercial vulnerability scanner from Tenable. It checks authorized hosts for known flaws, weak settings, and missing patches, then produces a report.
Organizations schedule it against their own address ranges. The report should feed a patching process. Scanning addresses you do not control is outside that job.
Example: A quarterly scan of the server VLAN lists missing updates with plugin IDs. Each item is either patched or formally accepted as a risk.
Git in the Zone explains security tools and attack terminology so you can recognize them and defend against them. Practice only on systems you own or have written permission to test. Nothing on this site runs a command or an exploit.
What it is for
Compare authorized hosts with Tenable's library of vulnerability checks.
Authorized use: Use it only on systems you own or have written permission to test. Git in the Zone explains the tool; it does not launch it.
Operating systems: Scanner components run on common server platforms and are managed from a web interface.
Language you will see
- plugin
- scan policy
- report
How to read the options
- Plugin: One check in the product's library, aimed at a particular flaw or configuration.
- Scan policy: The chosen set of checks and targets. A safe policy stays inside the approved address range.
Common misconception
- A commercial license does not expand the legal scope. You still scan only systems the organization is allowed to test.