Skip to content

Latest commit

 

History

History
75 lines (57 loc) · 2.46 KB

README.md

File metadata and controls

75 lines (57 loc) · 2.46 KB
Raw

Notes taken while learnining OpenVAS

Terminology

  1. NVT - Network Vunlerability Test. Scan Definitions
  2. GVM - Greenbone Vunlerability Management
  3. GSM - Greenbone Security Manager - Commercial Vulnerability Management
  4. CPE - Common Platform Enumeration
  5. Source Addtion - Open Source version of OpenVAS

Steps to install OpenVAS on Kali

  1. Make sure you are up to date
    sudo apt update -y
    sudo apt upgrade -y
  2. Install OpenVas
    sudo apt install openvas sudo gvm-setup sudo gvm-feed-update sudo systemctl start redis-server sudo gvm-start
  3. Troubleshooting/optional commands
    sudo runuser -u _gvm -- greenbone-nvt-sync sudo runuser -u _gvm -- openvas -u sudo runuser -u _gvm -- greenbone-feed-sync --type GVMD_DATA
    sudo runuser -u _gvm -- greenbone-feed-sync --type SCAP
    sudo runuser -u _gvm -- greenbone-feed-sync --type CERT
    • Other sync commads sudo runuser -u _gvm -- greenbone-nvt-sync   sudo runuser -u _gvm -- greenbone-certdata-sync sudo runuser -u _gvm -- greenbone-scapdata-sync

Steps to make WebUI available to network from a Kali install

  1. cd /lib/systemd/system
  2. vi greenbone-security-assistant.service
  3. Change 127.0.0.1 to 0.0.0.0
  4. Change Admin password sudo gvmd --user=admin --new-password=PassWord12#$34

Steps to mak WebUI available to network from Greenbone Management Appliance

  1. openvas-stop
  2. cd /lib/systemd/system
  3. sed -e 's/127.0.0.1/0.0.0.0/g' greenbone-security-assistant.service openvas-manager.service openvas-scanner.service -i
  4. gsad --listen=0.0.0.0
  5. openvas-start
  6. sudo openvasmd start

Update NVT's

Add targets

  1. Several ways to add targets.
    • Configuration -> Targets
    • Scans -> Tasks

Scan targets

Filter example

  1. CVE-2021 sort-reverse=created rows=20 first=1 - NTV Filter
  2. CVE-2021-25275 - CVE - CVE Filter

Create a Custom Security Policy

  1. Clone a current policy
  2. Edit the newly cloned policy to match your organization policy

References

  1. Online Admin Manual
  2. Kali Documentation
  3. Kali Blog
  4. ICON Cheatsheet
  5. PowerPoint Presentation