OpenVAS - Open Vulnerability Assessment Scanner

1. What is OpenVAS?

OpenVAS (Open Vulnerability Assessment Scanner) is a full-featured open-source vulnerability scanner. It is part of the Greenbone Vulnerability Management (GVM) framework.

2. OpenVAS Architecture

3. Installation (Kali Linux)

# Update package list
sudo apt update

# Install OpenVAS
sudo apt install openvas

# Setup OpenVAS
sudo gvm-setup

# Check installation
sudo gvm-check-setup

# Start OpenVAS services
sudo gvm-start

# Access web interface
# URL: https://127.0.0.1:9392
# Default user: admin

4. Basic Usage

Step 1: Create a Target

1. Login to GSA (web interface)
2. Go to Configuration → Targets
3. Click "New Target"
4. Enter target name and IP/hostname
5. Save the target

Step 2: Create a Task

1. Go to Scans → Tasks
2. Click "New Task"
3. Select the target
4. Choose scan configuration (Full and fast recommended)
5. Save and start the task

Step 3: View Results

1. Go to Scans → Reports
2. Select the completed scan
3. Review vulnerabilities by severity
4. Export report (PDF, HTML, XML)

5. Scan Configurations

6. Command Line Interface

# Check GVM status
sudo gvm-check-setup

# Start GVM services
sudo gvm-start

# Stop GVM services
sudo gvm-stop

# Update NVT feed
sudo greenbone-nvt-sync

# Update SCAP data
sudo greenbone-scapdata-sync

# Update CERT data
sudo greenbone-certdata-sync