Nessus

Nessus
软件描述
跨多个平台的自动化实时评估能够发现漏洞,识别缺陷、恶意软件和配置错误,并采用评分系统来帮助优先处理修复工作,同时为资深用户和新手提供相应的工具。
什么是 Nessus?
Nessus 是一款通过自动化即时评估来识别系统漏洞的软件工具。它能够检测各类操作系统、设备和应用程序中软件缺陷、缺失补丁、恶意软件以及配置错误。这种全面的扫描能力有助于深入理解系统漏洞及潜在威胁。
该软件采用了多种漏洞评分系统,如 CVSS v4、EPSS 和 Tenable 的 VPR。这些系统有助于对漏洞进行优先级排序,从而支持漏洞修复计划的制定与实施。Nessus 还提供了一个资源中心,其中包含可操作的建议和指导。这一功能既适用于熟悉安全协议的资深人员,也便于不熟悉安全规范的用户,为应对已识别漏洞的下一步行动提供了清晰的指引。
🔄 替代方案
46 个选择一个免费的深度网站分析工具,可对安全性、性能、搜索引擎优化(SEO)、无障碍性及其他技术方面进行检测。支持 Windows/macOS/Linux 桌面应用程序版本,以及面向高级用户和 CI/CD 流程的命令行工具版本。此外,还包含离线网页导出功能。
A web security portfolio offering a combination of on-premise installed security software in conjunction with a cloud hosted web application firewall and CDN.
Intruder is a security monitoring platform for internet-facing systems. Intruder provides an easy to use security solution which continually scans your digital assets, highlighting vulnerabilities and outlining remediation advice in simple terms.
Metasploit Community Edition simplifies network discovery and vulnerability verification for specific exploits, increasing the effectiveness of vulnerability scanners such as Nexpose - for free. This helps prioritize remediation and eliminate false positives, providing true...

OpenVAS
The Open Vulnerability Assessment System (OpenVAS) is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.

PhoneSploit Pro
An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

OpenSCAP
SCAP is a line of standards managed by NIST. It was created to provide a standardized approach to maintaining the security of enterprise systems, such as automatically verifying the presence of patches, checking system security configuration settings, and examining systems for...