Penetration Testing with Openvas Vulnerability Scanner

What is Openvas ?

OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.

Official Website :- http://www.openvas.org/

Installing Openvas Vulnerability Scanner

Code:

root@hacker:~#apt-get update
root@hacker:~#apt-get install openvas

While installing you will be asked to create Certificate and add it to the Openvas. If you get any Difficulty there, than reply here with your error message.

Adding User to OpenVas

Whenever you will Run them, It will ask you to add username and password, give any of your choice.
And than Make the Certificate.
Afterwards Synchronise with NVT's

Start Scanner :-
Whenever you start Scanner , It will write All Plugins Loaded., as it will check if all NVT's are loaded or not.

What are NVT's ?

These are the scripts that scanner uses to detect the vulnerabilities in what you are scanning.

How to Make Client Certification for Openvas Manager ?

Code:

root@hacker~# openvas-mkcert-client -n om -i

Now we need to rebuild the database as it is now out of date with the added nvt's and we would otherwise get errors about the database. You should do this each time you update the NVT's. This is done with a simple command.

Code:

root@hacker~# openvasmd --rebuild

Settin up OpenVAS Administrator

Code:

root@hacker~# openvasad -c 'add_user' -n openvasadmin -r Admin

Once you run above Command , It will ask password, Enter your password.

How to Start OpenVAS Manager

Code:

root@hacker~# openvasmd -p 9390 -a 127.0.0.1

Now, Once your Openvas Manager Starts, Start your Openvas Administrator profile.

Code:

root@hacker~# openvasad -a 127.0.0.1 -p 9393

Now, Once they have Started, the most important stuff is now to again Start Greenbone Security Assistant.

Code:

root@hacker~# gsad --http-only --listen=127.0.0.1 -p 9392

Now, When Done Run Greenbone Desktop Security Assistant OR Web Interface, (Any of your Choice).

1. Once Installation Done, You can run Desktop Security Assistant from your linux menu interface.

For Web. Follow this URL

Code:

http://127.0.0.1:9392

Whatever you will Open they will ask you login credentials. There you have to enter your login credentials and than in Web Interface it's pretty easy to handle to create task and run them with various loaded plugins.

Starting OpenVAS with a web browser as the scanning interface

I am repeating this step, so that you don't forget.. Whenever You need to Start OpenVas Do Below 3 Steps.

First select the option of "Sync with NVT's"
and than Select Start Openvas Scanner
and than in Terminal Type below commands

Code:

root@hacker~# openvasmd --rebuild
root@hacker~# openvasmd -p 9390 -a 127.0.0.1
root@hacker~# openvasad -a 127.0.0.1 -p 9393
root@hacker~# gsad --http-only --listen=127.0.0.1 -p 9392

and than start scanning and finding the exploits in the application

Good Luck