My Question: Is there any sort of website that maps Nessus Scan IDs to Metasploit Vulnerabilities?
My Situation: I'm learning about penetration testing and I'm beginning to get frustrated seeing a nessus scan like this (for example):
Plugin ID Risk Name 25216 Critical Samba NDR MS-RPC Request Heap-Based Remote Buffer Overflow
And then having to figure out which metasploit exploit module I can use to exploit that vulnerability. I wind up having to do something like:
msf> search samba
And getting a ton of results to sift through.
Like I said, I'm just learning, so if you need more information try to not jump down my throat about it :) I'll give you more info :)
What would be even cooler is if there were some sort of tool I could load my nessus scan into which would exploit each of the vulnerabilities in turn. That would rock. If that doesn't exist, my question is why...? :)