![\"\"](\"https:\/\/eriberto.pro.br\/blog\/wp-content\/uploads\/2017\/06\/openvas.png\")
OpenVAS is a framework of several services and tools offering a comprehensive and powerful ![\"\"](\"https:\/\/eriberto.pro.br\/blog\/wp-content\/uploads\/2017\/06\/greenbone-1.png\")
vulnerability scanning and vulnerability management solution. The framework is part of Greenbone Networks’ commercial vulnerability management solution from which developments are contributed to the Open Source community since 2009.<\/p>\n
OpenVAS is composed of some elements, as OpenVAS-Cli, Greenbone Security Assistant, OpenVAS Scanner and OpenVAS Manager.<\/p>\n
The official OpenVAS homepage is http:\/\/www.openvas.org<\/a>.<\/p>\n Ok, this is a temporary solution. Now (June 2017), Debian 9 wasn’t released yet and OpenVAS 9 is not available in Debian in good conditions (it is in Experimental but a bit problematic). I think that we will have OpenVAS in backports<\/a> soon.<\/p>\n The OpenVAS 9 from Kali is working perfect for Debian 9. So, to take advantage of this, adopt the following procedures:<\/p>\n 1. Add a line to end of \/etc\/apt\/sources.list<\/em> file:<\/p>\n 2. Run:<\/p>\n (if you want to simulate before install, add a -s option before -t)<\/p>\n 3. Rermove or comment the previous line added to \/etc\/apt\/sources.list<\/em> file to avoid future problems in your Debian.<\/p>\n 4. Run the following command to configure the OpenVAS and to download the initial database:<\/p>\n This step may take some time. Note that the initial password for user admin will be created and shown.<\/p>\n 5. Finally, open a web browser and access the address https:\/\/127.0.0.1:9392 (use https!!!). Alternatively, you can call http:\/\/127.0.0.1 to be automagically redirected to\u00a0https:\/\/127.0.0.1:9392.<\/p>\n The default user is admin and the password was shown in the last step. You will can change this password inside OpenVAS (menu Administration > Users > Edit User, which is an blue icon).<\/p>\n If your password was lost, you will be able to create a new administrative user via shell command. See the section “Some tips” below.<\/p>\n 6. To see the packages installed from Kali Linux, use the command:<\/p>\n To create a new administrative user called test:<\/p>\n To update the database (NVTs):<\/p>\n To solve the message “Login failed. Waiting for OMP service to become available”:<\/p>\n To make OpenVAS listen all network interfaces, allowing one to call the service in a remote web browser (http:\/\/remote-server, port 80 only), edit the\u00a0\/lib\/systemd\/system\/greenbone-security-assistant.service and change:<\/p>\n to<\/p>\n After the change, reload the configuration and restart the service:<\/p>\n If OpenVAS isn’t familiar for you, I have a suggestion for a quick test. Firstly, download Ubuntu Server 8.04 from this page<\/a> and install it inside a virtual machine, selecting all services as LAMP, SSH etc. I used the i386 version and VirtualBox. After this, use OpenVAS to scan the Ubuntu (menu Scans > Tasks > a pink icon with a magic wand in the upper left corner). After the scan, click over the blue bar where we will can see the word “Done”.<\/p>\n Enjoy!<\/p>\n","protected":false},"excerpt":{"rendered":" The OpenVAS OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution. The framework is part of Greenbone Networks’ commercial vulnerability management solution from which developments are contributed to the Open Source community since 2009. OpenVAS is composed of some elements, as OpenVAS-Cli, Greenbone Security… Continue a ler »OpenVAS 9 from Kali Linux 2017.1 to Debian 9<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[16,24,5,1],"tags":[624,61,611,625,656,654,653,655,667,622,424,623,652],"class_list":["post-2273","post","type-post","status-publish","format-standard","hentry","category-debian","category-internet","category-seguranca","category-uncategorized","tag-debian","tag-hacker","tag-hardening","tag-internet","tag-nessus","tag-network","tag-openvas","tag-pentest","tag-planet-en","tag-rede","tag-security","tag-seguranca","tag-stretch"],"_links":{"self":[{"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/posts\/2273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/comments?post=2273"}],"version-history":[{"count":13,"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/posts\/2273\/revisions"}],"predecessor-version":[{"id":2289,"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/posts\/2273\/revisions\/2289"}],"wp:attachment":[{"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/media?parent=2273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/categories?post=2273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eriberto.pro.br\/blog\/wp-json\/wp\/v2\/tags?post=2273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}From Kali Linux 2017.1 to Debian 9<\/h2>\n
deb http:\/\/http.kali.org\/kali kali-rolling main<\/pre>\n
# apt-get update\r\n# apt-get install -t kali-rolling openvas<\/pre>\n
# openvas-setup<\/pre>\n
$ dpkg -l | grep kali<\/pre>\n
Some tips<\/h2>\n
# openvasmd --create-user test --role Admin<\/pre>\n
# openvasmd --update\r\n# openvasmd --rebuild\r\n# service openvas-scanner restart<\/pre>\n
# openvas-start<\/pre>\n
ExecStart=\/usr\/sbin\/gsad --foreground --listen=127.0.0.1 --port=9392 --mlisten=127.0.0.1 --mport=9390<\/pre>\n
ExecStart=\/usr\/sbin\/gsad --foreground --listen=0.0.0.0 --port=9392 --mlisten=127.0.0.1 --mport=9390<\/pre>\n
# systemctl daemon-reload\r\n# systemctl restart greenbone-security-assistant<\/pre>\n
Quick start for beginners<\/h2>\n