The paper introduces the Nessus and NASL, and then gives the steps of developing a Nessus plug-in and the structure of Nessus plug-in. Meanwhile an example of weak password is presented to show the progress of developing a Nessus plug-in.

• 本文在简单介绍Nessus和NASL后,给出了Nessus漏洞插件开发的基本流程和Nessus插件的基本结构,最后通过一类弱口令探测插件的实例来说明Nessus插件的开发。