OpenVAS

This presentation contains the information about the OpenVAS understanding installation procedure in Linux and also contains the Working and it's screen shots

1. What is OpenVAS? OpenVAS stands for ‘Open Vulnerability Assessment System’. OpenVAS (Open Vulnerability Assessment System) is a software framework of several services and tools offering vulnerability scanning and vulnerability management. All OpenVAS products are free software, and most components are licensed under the GNU General Public License (GPL). Plugins for OpenVAS are written in the Nessus Attack Scripting Language (NASL).

2. Vulnerability A vulnerability is a weakness which can be exploited by a threat actor, such as an attacker, to perform unauthorized actions within a computer system. Vulnerability Scanners are automated tools that scan web applications, normally from the outside, to look for security . Vulnerability Scanner

3. Cyber Attacks has 3 Possibilities

4. OpenVAS Architecture

5. OpenVAS manager : The Manager is the central Service that consolidates plain vulnerability management system. It Controls one or more scanners as well as the internal central SQL database where all scan results and configurations are stored. OpenVAS Scanner : The Scanner very effectively executes the actual network vulnerability tests which is updated daily, it is managed by manager. Greenbone security assistant: It is a learn web service which designed for security purpose to implement fully functioned OpenVAS manager. OpenVAS CLI : This contains primarily contains the command line tool ’ omp ’. It allows user to create batch processes to control OpenVAS manager.

6. OpenVAS working

7. Working of OpenVAS The OpenVAS scanner is a comprehensive vulnerability assessment system that can detect security issues in all manner of servers and network devices. can test a system for security holes using a database of over 5,30,000 test plugins. Enter the target to scan Select scan type Launch the Vulnerability Scan!

8. Installation of OpenVAS apt update && apt install sqlite3 && apt install openvas9 apt install texlive -latex-extra --no-install-recommends apt-get install texlive -fonts-recommended greenbone - nvt -sync greenbone - scapdata -sync greenbone - certdata -sync add-apt-repository ppa:mrazavi / openvas ps - ef | grep openvas apt install smbclient service openvas -manager restart openvasmd --rebuild --progress

9. Users Admin (All rights, allocates roles to all user) Guest Info Monitor (only view) Observer (only view) User (All the rights)

10. Request for scanning