{"id":145,"date":"2021-02-25T22:51:48","date_gmt":"2021-02-25T22:51:48","guid":{"rendered":"https:\/\/cas.cybercop-training.ch\/?page_id=145"},"modified":"2021-05-31T14:22:56","modified_gmt":"2021-05-31T14:22:56","slug":"openvas-vulnerability-scanning","status":"publish","type":"page","link":"https:\/\/cas.cybercop-training.ch\/index.php\/openvas-vulnerability-scanning\/","title":{"rendered":"OpenVAS Vulnerability Scanning"},"content":{"rendered":"

1. Introduction<\/h1>\n
\n

In 2005, the developers of the vulnerability scanner Nessus decided to discontinue the work under
\nOpen Source licenses and switch to a proprietary business model. The open source tool was called
\nOpenVAS. In late 2008, the company Greenbone Networks GmbH, based in Osnabr\u00fcck, Germany
\nwas founded to push forward OpenVAS. The year 2017 marked the beginning of a new era:
\nGreenbone became visible as the driving force behind OpenVAS, reducing the brand confusion. This
\nincluded several activities, the most essential one the renaming of the "OpenVAS framework" to
\n"Greenbone Vulnerability Management" (GVM), of which the OpenVAS Scanner is one of many
\nmodules.<\/p>\n<\/blockquote>\n

After setting up the Hackinglab VPN Connection, please perform a vulnerability scan with OpenVAS against
\nthe following networks:<\/p>\n

\n

>
\n192.168.200.0\/24
\n192.168.202.0\/24<\/p>\n<\/blockquote>\n

\"\"<\/p>\n

May you want to start with some single ip addresses (otherwise it take a very long time)
\nPlease submit a ZIP file containing your own pdf report and html scan results.<\/p>\n

    \n
  1. Describe this task<\/li>\n
  2. Describe your methodology<\/li>\n
  3. Describe your lesson learned<\/li>\n
  4. Attach the vulnerability report from your scan (html)<\/li>\n<\/ol>\n

    2. Answers and Solution<\/h2>\n
      \n
    1. See description above<\/li>\n
    2. This is the active part of reconnaissance. Using OpenVAS, an opensource vulnerability scanner for gathering useful information about the targets networks and any possible exploits and vulnerabilities.<\/li>\n
    3. This exercise gave me really headache, because the setup was very time consuming and there was a problem with updating the signatures. Finally I got it to work, but decided to scan a single host instead
      \nof the whole ip range. I got the signature update (greenbone-nvt-sync<\/code>) only to work, by starting the docker setup witout the nvt-sync<\/code> container.<\/li>\n<\/ol>\n

      \"\"<\/p>\n

      docker -execute -it c5fd91baa386 bash<\/code><\/p>\n

      \"\"<\/p>\n

      After setting up the update command greenbone-nvt-sync and openvas-u the VTS list got loaded!<\/p>\n

      \"\"<\/p>\n

      \"\"<\/p>\n

      Attached, please find my results:<\/p>\n

      open_vas<\/a><\/p>\n

      There was no option to export a html report. A pdf export gave me a 0byte document. Maybe there’s a dependency missing?<\/p>\n

      https:\/\/gist.github.com\/rain1024\/98dd5e2c6c8c28f9ea9d<\/a><\/p>\n

      PDF Report:
      \n      open_vas#1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

      1. Introduction In 2005, the developers of the vulnerability scanner Nessus decided to discontinue the work under Open Source licenses and switch to a proprietary business model. The open source tool was called OpenVAS. In late 2008, the company Greenbone Networks GmbH, based in Osnabr\u00fcck, Germany was founded to push forward OpenVAS. The year 2017 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-145","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/comments?post=145"}],"version-history":[{"count":3,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/145\/revisions"}],"predecessor-version":[{"id":1344,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/145\/revisions\/1344"}],"wp:attachment":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/media?parent=145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}