Sunday, 26 July 2015

Openvas 6 Binary Installation

Openvas 6 Binary Installation guide:

Openvas For CentOS:

Step 1: Configure Repository

use SU command  for CentOs..  root  user
IF wget command is not working..install it using yum install wget inCentOS 

wget -q -O - http://www.atomicorp.com/installers/atomic |sh
 

Step 2: Quick-Install OpenVAS

To download and install all updates type the following command: yum update  
yum upgrade 
yum install
openvas openvas-setup
 

Step 3: Quick-Start OpenVAS



( nothing to do, all is up and running directly after installation )
Step 4: Log into OpenVAS with user created in the step 2
 
Open https://localhost:9392/.

reference:

http://www.openvas.org/install-packages-v6.html

 Openvas For Ubuntu:

 

Step 1: Configure Repository

use sudo -i command  for Ubuntu..  root  user

echo "deb http://download.opensuse.org/repositories/security:/OpenVAS:/UNSTABLE:/v6/Debian_7.0/ ./" >> /etc/apt/sources.list 

wget  http://download.opensuse.org/repositories/security:/OpenVAS:/UNSTABLE:/v6/Debian_7.0/Release.key apt-key add ./Release.key sudo 

apt-get update
 

Step 2: Quick-Install OpenVAS

 

install all steps as root user

apt-get -y install greenbone-security-assistant openvas-cli openvas-manager openvas-scanner openvas-administrator sqlite3 xsltproc rsync

To install support packages for report generation (downloads around 30 MB of additional packages): 

apt-get -y install texlive-latex-base texlive-latex-extra texlive-latex-recommended htmldoc 

To install support for autogenerated LSC credential packages: 

apt-get -y install alien rpm nsis fakeroot

Step 3: Quick-Start OpenVAS

 test -e /var/lib/openvas/CA/cacert.pem  || sudo openvas-mkcert -q
 
 sudo openvas-nvt-sync
 
 test -e /var/lib/openvas/users/om || sudo openvas-mkcert-client -n om -i
 
 sudo /etc/init.d/openvas-manager stop
 
 sudo /etc/init.d/openvas-scanner stop
 
 sudo openvassd
 
 sudo openvasmd --migrate
 
 sudo openvasmd --rebuild
 
 sudo killall openvassd
 
 sleep 15
 
 sudo /etc/init.d/openvas-scanner start
 
 sudo /etc/init.d/openvas-manager start
 
 sudo /etc/init.d/openvas-administrator restart
 
 sudo /etc/init.d/greenbone-security-assistant restart
 
 test -e /var/lib/openvas/users/admin || sudo openvasad -c add_user -n admin -r Admin
 here you create admin ..password will be generated

 
 
 
 

Step 4: Log into OpenVAS as "admin"

 
Open https://localhost:9392/.

refernce:


 


OpenVas 7 Binary Installation:

OpenVas 7 Binary Installation:


OpenVAS for CentOS and Fedora


Step 1: Configure Repository
use SU command  for CentOs..  root  user
use SU - command for Fedora .. root user
IF wget command is not working..install it using yum install wget inCentOS
 
wget -q -O - http://www.atomicorp.com/installers/atomic |sh
 
Step 2: Quick-Install OpenVAS
(as user root, only once)
To download and install all updates type the following command: yum update
 yum upgrade
 yum install openvas 
openvas-setup
 
 
Step 3: Quick-Start OpenVAS


( nothing to do, all is up and running directly after installation 
Step 4: Log into OpenVAS with user created in the step 2
Open https://localhost:9392/

reference:

OpenVAS

The world's most advanced Open Source vulnerability scanner and manager

                  OpenVAS (Open Vulnerability Assessment System, the name of the fork originally known as GNessUs) is a framework of several services and tools offering a vulnerability scanning and vulnerability management solution.
All OpenVAS products are Free Software. Most components are licensed under the GPL.

It has four components :-
  • OpenVAS Scanner
  • OpenVAS Manager
  • OpenVAS CLI
  • Green-bone Security Assistant (GSA)
The core of this SSL-secured service-oriented architecture is the OpenVAS Scanner. The scanner very efficiently executes the actual Network Vulnerability Tests (NVTs) which are served with daily updates via the OpenVAS NVT Feed or via a commercial feed service.
The OpenVAS Manager is the central service that consolidates plain vulnerability scanning into a full vulnerability management solution. The Manager controls the Scanner via OTP (OpenVAS Transfer Protocol) and itself offers the XML-based, stateless OpenVAS Management Protocol (OMP). All intelligence is implemented in the Manager so that it is possible to implement various lean clients that will behave consistently
                                
                                                    The Manager also controls a SQL database (sqlite-based sql-lite3) where all configuration and scan result data is centrally stored. Finally, Manager also handles user management includiung access control with groups and roles.
Different OMP clients:-
OpenVAS CLI contains the command line tool "omp" which allows to create batch processes to drive OpenVAS Manager.
The Greenbone Security Assistant (GSA) is a lean web service offering a user interface for web browsers. GSA uses XSL transformation stylesheet that converts OMP responses into HTML.