What is nessus-cve-poc-finder?

This is a small Python script for security professionals who already run vulnerability scans with Nessus, a common vulnerability scanning tool. Nessus produces a .nessus file listing every vulnerability it found, each tagged with CVE numbers, which are the standard reference IDs used to identify known security flaws. This script reads that file and pulls out all the CVE numbers it contains. Once it has the CVE list, the script can do a few things depending on which options are used. It can print just the unique, sorted list of CVE IDs found across a scan. It can write the full results, including which host and which Nessus plugin each CVE came from, out to a CSV file for further review or reporting. Its most useful option cross-references every unique CVE against searchsploit, a tool that searches a local copy of the Exploit Database, and prints out any exploit proof-of-concept code that exactly matches one of those CVEs. The README includes a worked example showing the script run against a sample scan file with the exploit cross-reference option turned on. For each CVE that has a matching exploit, it lists the affected host IP addresses, a short description of the exploit, its Exploit Database ID, and the local file path where the exploit code can be found, covering things like a Java deserialization remote code execution flaw in Oracle WebLogic Server and an Apache Tomcat file read vulnerability known as Ghostcat. The example run also reports summary numbers, such as how many of the total unique CVEs found had an exact-match exploit available. The tool is intended to help a penetration tester or security analyst quickly prioritize which findings from a Nessus scan already have a working, publicly known exploit, rather than having to look up every CVE by hand. It depends on searchsploit and its underlying Exploit Database archive being installed and up to date on the machine running the script.