Revision as of 06:52, 28 May 2011

Description

Using OpenVAS to scan a hosts or network for vulnerabilities.

Requirements:A remote host with various network services (SSH, HTTP, DNS, SMTP ...).

For example: a Linux server with OpenSSH, Apache HTTPd, ISC BIND, Postfix or Sendmail.

yum install openvas-scanner openvas-libraries openvas-client

Start OpenVAS scanner: /etc/init.d/openvas-scanner
Create a new certificate: openvas-mkcert
Add a OpenVAS user: openvas-adduser
Update the NVTs: openvas-nvt-sync
Restart OpenVAS scanner (take a while for the first time): /etc/init.d/openvas-scanner restart
Start OpenVAS client: openvas-client (Or System Tools > OpenVAS Client)
Log in with the user created in step 3.
Create a new scan using the client and wait until it finishes.
Export the report to a HTML or PDF.

The scan should finish correctly.
In the report, you should see the network services being scanned and vulnerabilities reported if exist.

@@ Line 2: / Line 2: @@
 |description=Using OpenVAS to scan a hosts or network for vulnerabilities.
 |setup=
-* A remote host with various network services (SSH, HTTP, DNS, SMTP ...).
+* '''Requirements:'''A remote host with various network services (SSH, HTTP, DNS, SMTP ...).
 For example: a Linux server with OpenSSH, Apache HTTPd, ISC BIND, Postfix or Sendmail.
-'''Note''': the ports of the scanned services must be opened in the firewall.
 * Install OpenVAS packages:
 <pre>yum install openvas-scanner openvas-libraries openvas-client</pre>
+* The ports of the scanned services must be opened in the firewall.
 |actions=
 # Start OpenVAS scanner: '''/etc/init.d/openvas-scanner'''