OpenVAS Walkthrough — Vulnerability Scanning Of Own System
Introduction:
OpenVAS, which stands for the ‘Open Vulnerability Assessment System,’ is one such full-featured, open-source vulnerability scanner which can be used for detecting security vulnerabilities associated with computers, servers, and networks. It can be utilized by security experts, pentesters, and system administrators to ensure the security and safety of their network and systems with respect to vulnerabilities.
Step 1: Install Open VAS
First, check open vas tool already installed in kali machine, and use ‘openvas –h’ command for help options
Step 2: Set Up Open VAS
In this step, run the setup command to initialize Open VAS
Command Used: sudo gvm-setup
This command create Open VAS database, create a admin user web GUI along with the password from the admin user
Step 3: Start OpenVAS Services
Get Ammarakhter’s stories in your inbox
Join Medium for free to get updates from this writer.
In this step, all necessary services started including Open VAS scanner and Greenbone Security Assistant (GSA) Web UI
Command Used: sudo gvm-start
After running this command a web page opens in Firefox ‘https://127.0.0.1:9392’ . It is GUI Web page of Greenbone Security Assistant(GSA)
Step 4: Access the Web Interface
After this, Log in the web page with the admin credentials created during gvm setup. It accept the self-signed SSL certificate warning. After this the Greenbone Security Assistant (GSA) opens
Step 5: Create a Scan Task
After this, In the dashboard select the scan tab and then select the task tab in which we define what scan to run and on which target.
In task tab, select the Advanced Task Wizard and create a new task in which we scan our own system. Assign the task name, and target host, in this we are scanning our own system we can write target host as local host or 127.0.0.1 but we are using the open vas in kali machine so kali machine is our local host. If we want to scan whole system we can check the IP in command prompt using command ipconfig and scan the whole system.
Step 6: Run an Advanced Scan Using the Wizard
After setting the target, click on create task to start the scan. But Unfortunately, my kali machine is facing some graphics issue due to this I am not able to complete the scan. After troubleshooting for few hours I am not able to resolve the issue.
