From Fedora Project Wiki

Revision as of 21:43, 28 May 2011 by Athmane (talk | contribs) (use command parser)

Description

This test case tests the ability of OpenVAS to scan a host or network for vulnerabilities.

Setup

  • A remote host with various network services (SSH, HTTP, DNS, SMTP ...) is required. For example: a Linux server with OpenSSH, Apache HTTPd, ISC BIND, Postfix or Sendmail.
  • Open ports of the scanned services in the remote host firewall.
  • Ensure that openvas-scanner, openvas-libraries, openvas-client packages are installed.

How to test

  1. Start OpenVAS scanner: /etc/init.d/openvas-scanner start
  2. Create a new certificate: openvas-mkcert
  3. Add a OpenVAS user: openvas-adduser
  4. Update the NVTs: openvas-nvt-sync
  5. Restart OpenVAS scanner (take a while for the first time): /etc/init.d/openvas-scanner restart
  6. Start OpenVAS client: openvas-client (or System Tools > OpenVAS Client)
  7. Connect to OpenVAS server with the user created above.
  8. Create a new scan using the client and wait until it finishes.
  9. Export the report to a HTML or PDF.

Expected Results

  1. The scan should finish correctly.
  2. In the report, you should see the network services being scanned and vulnerabilities reported.
Retrieved from "https://fedoraproject.org/w/index.php?title=QA:Testcase_OpenVAS&oldid=238539"