Gray Hat C#: A Hacker's Guide to Creating and Automating Security Tools by Brandon Perry

Author:Brandon Perry [Perry, Brandon]
Language: eng
Format: azw3
ISBN: 9781593277598
Publisher: No Starch Press
Published: 2017-06-08T04:00:00+00:00

Installing OpenVAS

The easiest way to install OpenVAS is to download the prebuilt OpenVAS Demo Virtual Appliance from http://www.openvas.org/. The file you’ll download is an .ova file (open virtualization archive) that should run in a virtualization tool like VirtualBox or VMware. Install VirtualBox or VMware on your system and then open the downloaded .ova file to run it in your virtualization tool of choice. (Give the OVA appliance at least 4GB of RAM to improve its performance.) The root password for the virtual appliance should be root. You should use the root user when updating the appliance with the latest vulnerability data.

Once you are logged in, update OpenVAS with the latest vulnerability information by entering the commands shown in Listing 7-1.

# openvas-nvt-sync

# openvas-scapdata-sync

# openvas-certdata-sync

# openvasmd --update

Listing 7-1: Commands used to update OpenVAS

Depending on your internet connection, the updates may take a good while to complete. Once they are finished, try to connect to the openvasmd process on port 9390 and then run a test command as shown in Listing 7-2.

$ openssl s_client <ip address>:9390

[...SSL NEGOTIATION...]

<get_version />

<get_version_response status="200" status_text="OK"><version>6.0</version></get_version_response>

Listing 7-2: Connecting to openvasmd

If everything is working, you should see OK in the status message at the end of the output.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.