skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

scanning-infrastructure-with-nessus

Configures and runs Tenable Nessus scans to identify vulnerabilities across network infrastructure.

954|172|Updated Mar 13, 2026
Search Tags:#network security#vulnerability scanning#cvss#cve#nessus#tenable#authenticated scan
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill scanning-infrastructure-with-nessus
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: scanning-infrastructure-with-nessus
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/vulnerability-management/scanning-infrastructure-with-nessus
Command: npx skills add https://github.com/xalgord/xalgorix --skill scanning-infrastructure-with-nessus

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams need a repeatable way to find CVEs, misconfigurations, and missing patches across servers, workstations, and network devices, but unauthenticated or poorly tuned scans miss up to 60% of vulnerabilities and produce noisy results.

Core Features & Use Cases

  • Scan Policy Configuration: Build custom Nessus policies covering host discovery, port scanning, plugin family selection, and credentialed checks for SSH, Windows, SNMP, and databases.
  • REST API Automation: Authenticate, create, launch, monitor, and export scans programmatically via the Nessus REST API using curl.
  • Result Analysis & Reporting: Triage findings by CVSS severity bands and export reports in Nessus XML, CSV, HTML, or PDF formats.
  • Use Case: A security engineer runs an authenticated quarterly scan of a 192.168.1.0/24 subnet, validates credentials with plugin 19506, and exports a CSV of Critical and High findings for the remediation team.

Quick Start

Use the Nessus skill to create and launch an authenticated vulnerability scan against my 192.168.1.0/24 network and export the results as CSV.

Frequently Asked Questions about scanning-infrastructure-with-nessus

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an authenticated Nessus scan?▼

Configure credentials under the Credentials tab of your scan policy, such as SSH keys for Linux, SMB or WMI credentials for Windows, and SNMP strings for network devices. Authenticated scans detect 45-60% more vulnerabilities than unauthenticated scans.

How do I launch a Nessus scan using the REST API?▼

Authenticate with a POST to /session to get a token, create a scan with POST /scans using a template UUID and targets, then launch it with POST /scans/<SCAN_ID>/launch. Poll GET /scans/<SCAN_ID> to check status.

Why does my Nessus scan miss vulnerabilities on some hosts?▼

Common causes include unauthenticated-only scanning, hosts not responding to the configured ping method, firewall rules blocking the scanner, and stale plugins. Validate credentials with plugin 19506 and update plugins before each scan.

What scan types does Nessus support?▼

Nessus supports host discovery, basic network scans, advanced custom scans, credentialed patch audits, web application tests, and compliance audits against CIS, DISA STIG, and PCI DSS benchmarks.

What export formats does Nessus support for scan reports?▼

Nessus exports scan results in Nessus XML, CSV, HTML, and PDF formats via the /scans/<SCAN_ID>/export API endpoint. Results can also be centralized in Tenable.sc or Tenable.io for trending analysis.

Related Skills

Explore More Software Engineering Skills→
davila7davila7
30.5k

Network 101

Configure and test HTTP, HTTPS, SNMP, and SMB services for penetration testing labs.

Community
Intermediate
randalmurphalrandalmurphal

Vulnerability Triage & Prioritization

Compute CVSS scores and prioritize vulnerabilities with weighted ranking.

Community
Basic
Muath2000Muath2000

threat-intel-engineer

Integrate, normalize, and correlate cyber threat data from STIX/TAXII feeds.

Community
Advanced
AeonDaveAeonDave
15

openvas

Run OpenVAS vulnerability scans against internal networks and generate compliance reports.

Community
Intermediate