Hands-On Web Penetration Testing with Metasploit

Performing a Nessus scan via Metasploit

Now that we have patched the Metasploit library, let's perform a Nessus scan using Metasploit:

1. After patching the gem, we can now create a vulnerability scanning task using the nessus_scan_new <UUID of Policy> <Scan name> <Description> <Targets> command, as shown here:

2. Once the task is created, we can confirm it by executing the nessus_scan_list command. Scan ID will be used to launch the task, so let's make a note of it, as shown here:

3. Let's confirm the same by accessing the Nessus web interface: ...