In this lab, we’ll be installing OpenVAS, an open source vulnerability scanner. Then we’ll configure it to scan `localhost` and export the scan task to our Downloads directory.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Install OpenVAS.
Run the following commands:
- `sudo add-apt-repository ppa:mrazavi/openvas (press ENTER when prompted)”
sudo apt-get updatesudo apt-get install -y sqlite3sudo apt-get install -y openvas9 (select YES when prompted)sudo service openvas-manager restart
If you are installing for a production system, you will need to run the below commands. However, it will take about an additional hour for Greenbone to download all of the data. We are not going to do this as part of the lab since it’s not necessary to complete the tasks.
sudo greenbone-nvt-syncgreenbone-scapdata-syncgreenbone-certdata-syncsudo openvasmd --rebuild --progresssudo service openvas-manager restart
- Create an OpenVAS scan of `localhost` and export the task to your Downloads directory.
Open a web browser on your Ubuntu lab host and go to https://10.0.0.116:4000. When prompted about an unsecure connection select Advanced, then Add Exception, then Confirm Security Exception
Login with the username admin and password of admin
Within OpenVAS, click on Scans, then Tasks. (You can close out the pop-up welcome message)
Click on the star icon and select New Task.
Fill out the following scan information:
Name: LabScan
Scan Targets: (click on the star icon next to "Target)", replace "unnamed" with "localhost", then click "Create".
Schedule: Check the box next to "Once"
Alterable Task: Mark "Yes"Click the Create button.
That completes the tasks in this lab.
