• Issue Tracking
• Automated Scans
• Compliance Testing
• Perimeter Scanning
• Configuration Monitoring
• Manual Application Testing
• Static Code Analysis
• Black Box Testing

1. Target Selection : Users specify the systems or networks they want to scan.
2. Scan Configuration : Users define scan parameters, such as the type of vulnerabilities to check.
3. Scanning Process : OpenVAS uses a database of known vulnerabilities to analyze the target system.
4. Detection & Reporting : It identifies security weaknesses and generates detailed reports with recommendations for remediation.

Key Components :

• OpenVAS Scanner : Performs the actual scanning using Network Vulnerability Tests (NVTs).
• OpenVAS Manager : Manages scan configurations, schedules, and stores results.
• Greenbone Security Assistant (GSA) : A web-based interface for managing scans and viewing results.
• OpenVAS CLI : A command-line tool for advanced users.
• Greenbone Security Feed (GSF) : Provides updated vulnerability tests to ensure OpenVAS detects the latest threats.

• Comprehensive coverage for a free solution.
• A dedicated community of developers.
• Open-source and free of charge.
• Support for multiple OS

OpenVAS (Open Vulnerability Assessment Scanner) is a powerful tool for vulnerability scanning and management. Here are some examples of its usage :

Basic Examples

1. Run a Quick Scan : openvas-cli --target 192.168.1.1 --scan-type quick

Performs a quick vulnerability scan on the target IP.

2. Full Network Scan : openvas-cli --target 192.168.1.0/24 --scan-type full

Scans an entire subnet for vulnerabilities.

3. Export Scan Results : openvas-cli --export-format pdf --output results.pdf

Exports the scan results in PDF format for reporting.

4. Update Vulnerability Database : openvas-feed-update

Ensures the latest vulnerability definitions are used for scans.

Advanced Examples

1. Credentialed Scans:
   • Configure credentials (e.g., SSH or Windows credentials) in the OpenVAS interface.
   • Perform a credentialed scan to identify deeper vulnerabilities like missing patches or misconfigurations.
2. Custom Scan Policies :
   • Create a custom scan policy to focus on specific vulnerabilities or exclude certain IPs/ports.
   • Use the policy during a scan : openvas-cli --target 192.168.1.1 --policy custom_policy
3. Web Application Scanning :
   • Use OpenVAS to scan web applications for vulnerabilities like SQL injection or cross-site scripting (XSS).
4. Integration with SIEM :
   • Integrate OpenVAS with a Security Information and Event Management (SIEM) tool to correlate scan results with other security events.

Practical Applications

• Vulnerability Management : Identify and prioritize vulnerabilities in your network.
• Compliance Auditing : Ensure systems meet regulatory and security standards.
• Incident Response : Use OpenVAS to identify vulnerabilities exploited during a security breach.

• Focal Fossa
• Bionic Beaver
• Trusty Tahr

Terminal Installation Commands ...
GUI Installation Steps ...

Linux

1. Update your system : sudo apt update
2. Install OpenVAS : sudo apt install openvas
3. Run the setup script to download the latest vulnerability feed and complete the installation : sudo openvas-setup
4. Start OpenVAS services :

$ sudo systemctl start gvmd

$ sudo systemctl start openvas-scanner

5. Enable services at startup (optional but recommended) :

$ sudo systemctl enable gvmd

$ sudo systemctl enable openvas-scanner

Windows & MacOS

Installation with VirtualBox

1. Download VirtualBox from here.
2. Download the Greenbone Security Manager (GSM) virtual machine from Greenbone
3. Import the GSM VM into VirtualBox.
4. Configure network settings to ensure connectivity.
5. Start the VM and log in using the default credentials.
6. Access the OpenVAS web interface via your browser.

Installation with Docker

1. Install Docker from Docker’s official site.
2. Pull the OpenVAS image using : docker pull greenbone/openvas
3. Run the container : docker run -d -p 443:443 greenbone/openvas
4. Access OpenVAS via your browser at https://localhost.

Terminal Uninstallation Commands ...
GUI Uninstallation Steps ...

Linux

1. Stop OpenVAS services :

$ sudo systemctl stop gvmd

$ sudo systemctl stop openvas-scanner

2. Remove OpenVAS : sudo apt remove --purge openvas
3. Clean up residual files (optional) :

$ sudo rm -rf /var/lib/openvas

$ sudo rm -rf /etc/openvas

Windows & MacOS

1. For VirtualBox: Delete the GSM VM from VirtualBox.
2. For Docker : Remove the container using : docker rm -f openvas

Then remove the image : docker rmi greenbone/openvas