Openvas:kali Vulnerability Assessment tool in Linux

Source: Internet
Author: User
Tags kali linux openvas cve

This tutorial will cover the process of installing OpenVAS 8.0 in Kali Linux. OpenVAS is an open source vulnerability assessment program that automates network security audits and vulnerability assessments. Note that vulnerability assessment (vulnerability assessment), also known as VA, is not a penetration test (penetration test), and penetration testing further verifies the existence of a discovered vulnerability. See what is penetration testing to understand the composition of penetration testing and the different types of safety tests.

What is Kali Linux?

Kali Linux is a distribution version of the Linux penetration test. It is based on Debian and has pre-installed many common penetration testing tools, such as the Metasploit Framework (MSF) and other command-line tools that are typically used by penetration testers during security evaluations.

In most use cases, Kali runs in a virtual machine where you can get the latest VMWare or Vbox images: https://www.offensive-security.com/ kali-linux-vmware-virtualbox-image-download/.

Unless you have a specific reason to want a smaller virtual machine to occupy space, download the full version instead of Kali light. After the download is complete, you need to unzip the file and open the VBox or VMWare. vmx file, and after the virtual machine starts, the default account is Root/toor. Please change the root password to a secure password.

Alternatively, you can download the ISO version and perform a Kali installation on bare metal.

Upgrading Kali Linux

Once the installation is complete, perform a complete upgrade for Kail Linux.

Upgrade Kali:

    1. Apt-get update && apt-get dist-upgrade-y

Updating Kali Linux

The update process may take some time to complete. Kali is currently a rolling update, which means that you can scroll from any version of Kali to the current version. However, it still has a release number, but these are VMWare snapshots for a specific Kali point-in-time version. You can update to the current stable version from any VMWare image.

Restart after the update is complete.

Installing OpenVAS 8

Installing OpenVAS 8

    1. Apt-get Install OpenVAS
    2. Openvas-setup

During the installation, you will be asked questions about Redis and choose the default option to run with UNIX sockets.

Configure OpenVAS Scanner

Even with a fast network connection, Openvas-setup still takes a long time to download and update all the required CVE, SCAP definitions.

Update all the required CVE, SCAP definitions

Note the command output of Openvas-setup, which is generated during the installation process and printed in the console at the end of the installation.

Command output during install

Verify that OpenVAS is running:

    1. Netstat-tulpn

Check OpenVAS Status

Run OpenVAS in Kali

To start OpenVAS in Kali:

    1. Openvas-start

After installation, you should be able to access the OpenVAS Web program through https://127.0.0.1:9392.

OpenVAS started

Accept the self-signed certificate and use the Openvas-setup output admin credentials and password login program.

Accept the self-signed SSL cert

After accepting the self-signed certificate, you should be able to see the login screen.

OpenVAS Login

After logging in, you should be able to see the following page:

OpenVAS Dashboard

From then on, you should be able to configure your own vulnerability scan using the wizard.

I recommend reading the documentation. Note the vulnerability assessment guidance (depending on the configuration that OpenVAS may attempt to exploit) and the traffic generated on the network, as well as the DOS impact that the network may have on services/servers and hosts/devices.

Last words: For Freedom, finally, Amway some oil + tube stable and easy to use + speed agent.

Wish everyone on YouTube to kill time to stroll around a happy, want to exercise English to obtain knowledge of learning has become :

Accelerator recommendations Free Solutions Payment Plan Official website
A Red apricot accelerator Free program is not available, stable high-speed Enter 80 percent coupon code WH80, annual pay only 80 yuan/year Website Direct
Azumino Accelerator Best use of foreign trade VPN Minimum ¥30/Month Website Direct
Loco Accelerator Free 2 hours per day Minimum ¥15/Month Website Direct

" stable and useful + speed agent: http://whosmall.com/go/yzhx"

This article tags: YouTube Watch YouTube videos learn a foreign language on YouTube youtube1080p on YouTube

Turn from SUN's BLOG-focus on Internet knowledge, share the spirit of the Internet!

Original Address : Do you know how powerful YouTube is? How to get on YouTube and the worst of it

Related reading : Chrome extension Stylish: "Skin-changing" with one click to not like a website

Related reading : "Integrating QQ music, NetEase cloud music and shrimp music resources" with chrome extension listen 1 "

Related reading : " 8" new tab "chrome Extensions: teach you to play the New tab page with a sneak"

Related reading : "7 Practical Chrome Extensions recommended: help you improve your chrome experience"

Related reading : "No extension is not Chrome: 15 Premium Chrome Extensions recommended for everyone"

Related reading : the best experience for Web browsing with 12 no less chrome extensions

Related reading : "5 Chrome extensions that bring happiness"

Related reading : The use case for the Palette class in Android: Color adaptive Toolbar

Related reading: What git can do, how it differs from SVN in depth

Related reading: "Share some of the most useful, user-friendly, and feature-rich Google Chrome Extensions for developers"

Related reading: a lot of brief encounter tools or websites that share some of the actual Android development process

related reading:"I am a G powder, has been concerned about Google, recently Google has some little gestures, probably a lot of people do not understand"

related reading:"machine learning leads to technological innovation in the field of cognition, so how can the SaaS industry be changed by machine learning?" 》

related reading:"VPS Tutorial Series: DNSMASQ + DNSCrypt + SNI Proxy smooth access to Google configuration tutorial"

related reading: most useful: 2017 the latest way to Google, Facebook

related Blog:sun ' S BLOG -Focus on Internet knowledge and share the spirit of Internet! Go and see:www.whosmall.com

Openvas:kali Vulnerability Assessment tool in Linux

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.