https://github.com/githubfoam/openvas-sandbox
openvas network security monitoring NIDS HIDS
https://github.com/githubfoam/openvas-sandbox
hids network-security-monitoring nids openvas vulnerability-detection vulnerability-scanners
Last synced: 7 months ago
JSON representation
openvas network security monitoring NIDS HIDS
- Host: GitHub
- URL: https://github.com/githubfoam/openvas-sandbox
- Owner: githubfoam
- License: gpl-3.0
- Created: 2019-11-27T17:29:44.000Z (almost 6 years ago)
- Default Branch: master
- Last Pushed: 2021-08-18T19:20:01.000Z (about 4 years ago)
- Last Synced: 2025-02-05T07:49:46.664Z (8 months ago)
- Topics: hids, network-security-monitoring, nids, openvas, vulnerability-detection, vulnerability-scanners
- Language: Jinja
- Homepage:
- Size: 50.8 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# openvas-sandbox
Travis (.com) branch:
[](https://travis-ci.com/githubfoam/openvas-sandbox)
~~~~
Deploy openVAS on kali linux
>vagrant init --template scripts/Vagrantfile.erb
>vagrant up vg-kali-02
>vagrant ssh vg-kali-02
apt-get update -y
apt-get upgrade -y
apt-get install -yq gvm
gvm-setup
gvm-start
browse the local host
“https://127.0.0.1:9392”
>vagrant destroy -f vg-kali-02
>del Vagrantfile
~~~~
~~~~
>vagrant init --template scripts/Vagrantfile.erb
>vagrant up "vg-openvas-01"
~~~~
~~~~
Login with admin and the password in the script output
total size is 63,121,109 speedup is 1.00
/usr/sbin/openvasmd
ExecStart=/usr/sbin/gsad --foreground --listen=0.0.0.0 --port=9392 --mlisten=0.0.0.0 --mport=9390 --allow-header-host 192.168.22.12
User created with password 'b124cb71-220b-4f0b-8308-005187a3828b'.
~~~~
~~~~
check that gsad is running and listening
# netstat -apn | grep LISTEN
# netstat -anp | grep gsad
vagrant@vg-openvas-02:~$ sudo netstat -apn | grep LISTEN
tcp 0 0 127.0.0.1:9390 0.0.0.0:* LISTEN 889/openvasmd
tcp 0 0 127.0.0.1:9392 0.0.0.0:* LISTEN 737/gsad
tcp 0 0 127.0.0.1:80 0.0.0.0:* LISTEN 900/gsad
vagrant@vg-openvas-02:~$ sudo netstat -anp | grep gsad
tcp 0 0 127.0.0.1:9392 0.0.0.0:* LISTEN 737/gsad
tcp 0 0 127.0.0.1:80 0.0.0.0:* LISTEN 900/gsad
unix 3 [ ] STREAM CONNECTED 18405 737/gsad
vagrant@vg-openvas-02:~$ sudo netstat -anp | grep openvas
tcp 0 0 127.0.0.1:9390 0.0.0.0:* LISTEN 889/openvasmd
unix 2 [ ACC ] STREAM LISTENING 23023 1488/openvassd: Wai /var/run/openvassd.sock
unix 2 [ ACC ] STREAM LISTENING 21878 863/redis-server 12 /var/run/redis-openvas/redis-server.sock
unix 3 [ ] STREAM CONNECTED 28186 863/redis-server 12 /var/run/redis-openvas/redis-server.sock
unix 3 [ ] STREAM CONNECTED 25910 1488/openvassd: Wai
unix 3 [ ] STREAM CONNECTED 20133 889/openvasmd
wget -p http://192.168.22.12
--2019-11-27 16:26:54-- http://192.168.22.12/
Connecting to 192.168.22.12:80... connected.
HTTP request sent, awaiting response... 303 See Other
Location: https://192.168.22.12:9392/login/login.html [following]
--2019-11-27 16:26:54-- https://192.168.22.12:9392/login/login.html
Connecting to 192.168.22.12:9392... connected.
ERROR: cannot verify 192.168.22.12's certificate, issued by ‘C=DE,L=Osnabrueck,O=OpenVAS Users,OU=Certificate Authority for vg-openvas-01’:
Unable to locally verify the issuer's authority.
ERROR: certificate common name ‘vg-openvas-01’ doesn't match requested host name ‘192.168.22.12’.
To connect to 192.168.22.12 insecurely, use `--no-check-certificate'.
https://192.168.22.12:9392/login/login.html
# vi /lib/systemd/system/greenbone-security-assistant.service
# systemctl daemon-reload
vagrant@vg-openvas-01:~$ sudo systemctl restart greenbone-security-assistant.service
vagrant@vg-openvas-01:~$ sudo systemctl status greenbone-security-assistant.service
# omp --help
password change
vg-openvas-01:~$ sudo openvasmd --user=admin --new-password=admin
$ sudo openvas-stop
Stopping OpenVas Services
$ sudo openvas-start
Starting OpenVas Services
~~~~
~~~~
Web UI
Menu - Configuration - Targets
Menu - Scans - Tasks
Network Targets
Single IPv4 address: 192.168.300.10
IPv4 address range in short format: 192.168.200.100-11
IPv4 address range in long format: 192.168.200.100-192.168.200.110
IPv4 address range in CIDR notation: 192.168.100.0/24
~~~~
~~~~
https://github.com/greenbone/openvas
~~~~