The Nessus Architecture
Nessus is based upon a client-server
model. The Nessus server, nessusd, is
responsible for performing the actual vulnerability tests. The Nessus
server listens for incoming connections from Nessus clients that end
users use to configure and launch specific scans. Nessus clients must
authenticate to the server before they are allowed to launch scans.
This architecture makes it easy to administer the Nessus
installations.
You can and should use NASL to write Nessus plug-ins. Another alternative is to use the C programming language, but this is strongly discouraged. C plug-ins are not as portable as NASL plug-ins, and you must recompile them for different architectures. NASL was designed to make life easier for those who want to write Nessus plug-ins, so you should use it to do so whenever possible.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access