Featured
Update Greenbone Vulnerability Management Plugins on Kali (NVT, Cert Data & SCAP Data) Automatically

Once you have installed or configured the Greenbone Vulnerability Management system it is a good idea to ensure it is kept up to date and running the latest security scripts to find the latest vulnerabilities as well as sync to the most updated nvt, scap and cert data.  The best way to do this is to create a script that sync’s the necessary data for you automatically each day.

Read more
Cloud Security
Using Docker To Install OpenVAS On CentOS

An interesting post from Gerry Williams at gerrywilliams.net Description: Saw a post on r/sysadmin the other day with a walkthrough on using Docker for the first time. Thought I would take some notes: To Resolve: 1. On the host computer, open up Hyper V and create a new Virtual Machine. Download the Centos7 iso if […]

Read more
Cloud Security
OpenVAS image for Docker on Ubuntu

A Docker container for OpenVAS on Ubuntu. By default, the latest images includes the OpenVAS Base as well as the NVTs and Certs required to run OpenVAS

Read more
How-to
Accessing and Installing GSM Community Edition - OpenVAS

Version: 4.2.17 (includes OpenVAS-9) Download: https://dl.greenbone.net/download/VM/gsm_ce_4.2.17.iso (350 MByte) sha256sum: a4490e1c1d5b93c52b67eb533da8aa0ebe435551f89c8cea1619e6a772733a97 Compatibility: VirtualBox, ESXi, Hyper-V Minimum requirements: 2 CPU Cores, 2 GByte RAM The GSM Community Edition is a derivate of the GSM ONE and allows a quick and easy option on Windows, Linux or Mac to give the solution a trial. No particular know-how is […]

Read more
How-to
Reset the admin password in OpenVAS

Try this: openvasmd --user=admin --new-password=new_password Or you can create a new administrative account with : openvasad -c add_user -u your_new_login_here -r Admin Then use this account to change the default admin’s password.

Read more
Vulnerability Assessment
OpenVAS & Metasploit Integration - How to Use OpenVAS in Metasploit

Recently during an engagement, I was able to use OpenVAS in Metasploit to scan a host and conduct a test to see if the system was indeed exploitable. Here is how it was done below:

Read more
Vulnerability Assessment
OpenVAS Authenticated Scan using Local Security Checks

An authenticated scan may provide more vulnerability details on the scanned system. During an authenticated scan the target is both scanned from the outside via the network and from the inside via a valid user login. During an authenticated scan OpenVAS logs in to the target system in order to run local security checks (LSC). […]

Read more
How-to
Openvas 9 on Ubuntu Setup

Sysadmin Ramblings Basic Installation  Install Ubuntu 16.04LTS Make sure you update your newly installed system with the latest patches - security updates. sudo apt-get update sudo apt-get upgrade sudo apt-get dist-upgrade Openvas9 is available as a package for Ubuntu 14.04 and Ubuntu 16.04. sudo add-apt-repository ppa:mrazavi/openvas sudo apt-get update sudo apt-get install openvas9 Follow the prompts and […]

Read more
General Security
Update OpenVAS Plugins (NVT, Cert Data & SCAP Data) Automatically

Once you have install OpenVAS it is a good idea to ensure it is kept up to date and running the latest security scripts to find the latest vulnerabilities as well as sync to the most updated nvt, scap and cert data.  The best way to do this is to create a script that sync's […]

Read more
General Security
How to Reset or Create a Password for OpenVas

The password to access OpenVas vulnerability scanner with username ‘admin’ is created during the initial setup.  At times you forget the password or want to reset it.  This can be accomplished by resetting the password using the following command: To change admin password: sudo openvasmd -- --user=admin -- --new-password=letmein Then logon using admin for the username […]

Read more