This chapter covers nessus and nexpose as a vulnerabilities scanner and gives you reporting tools for the main vulnerabilities found in servers and web applications. Also, we cover how to use them programmatically from Python with the nessrest and Pynexpose modules.

The following topics will be covered in this chapter:

• Understanding vulnerabilities
• Understanding the nessus vulnerabilities scanner
• Understanding the nessrest module that allows us to connect with a Nessus server
• Understanding the nexpose vulnerabilities scanner
• Understanding the Pynexpose module that allows us to connect with a Nexpose server