摘要： Nessus是当前较先进的漏洞扫描软件，它以插件的形式完成漏洞检查。该文在分析了其插件开发语言的基础上，提出了Nessus插件开发的基本流程，通过一类弱口令探测插件的实例来说明Nessus插件的开发。

关键词: Nessus, 漏洞, 扫描

Abstract: Nessus is an advanced vulnerability scanner, which checks the vulnerability by the plugins. The paper analyses the advantage of the Nessus attack scripting language. It gives the steps of developing a Nessus plug-in. An example of weak password is presented to show the progress of developing a Nessus plugin.

Key words: Nessus, Vulnerability, Scan