GO KALI FREE

OpenVAS

Vulnerability Analysis

Advancedhigh risk

OpenVAS (Open Vulnerability Assessment System) is a full-featured vulnerability scanner providing a comprehensive architectural network engine that checks endpoints against thousands of active vulnerability feeds.

Installation

sudo apt install openvas && gvm-setup

Basic Syntax

gvm-start

Quick Facts

Full Name
OpenVAS / GVM
License
GPL
Interface
Web (Greenbone)
Vulnerability Tests
50,000+
Category
Vulnerability Scanner
Feed Source
NVT Feed

Tool Overview

OpenVAS (Open Vulnerability Assessment System) is a full-featured vulnerability scanner providing a comprehensive network engine that checks endpoints against thousands of active vulnerability feeds.

The tool includes the Greenbone Vulnerability Management (GVM) framework with a web interface for scan configuration, execution, and reporting. It supports authenticated and unauthenticated scanning.

OpenVAS is the leading open source vulnerability scanner, providing enterprise-grade features including scan scheduling, report generation, and compliance checking. It requires significant system resources.

Common Commands

gvm-startInitialize backend services - Launch the Greenbone Vulnerability Management local daemon infrastructure
sudo gvm-setupInitial setup
sudo gvm-startStart OpenVAS
sudo gvm-feed-updateUpdate feeds
openvasmd --migrateMigrate database to current version
openvasmd --rebuildRebuild NVT database
gsad --listen=127.0.0.1 --port=9392Start web interface on custom port
openvasmd --user=admin --new-password=passCreate or reset admin password
openvas-check-setupVerify OpenVAS installation
openvasmd --get-scannersList configured scanners
openvasmd --get-targetsList configured targets
openvasmd --get-tasksList configured scan tasks
openvasmd --create-task name=target_idCreate a new scan task
openvasmd --start-task TASK_IDStart a configured scan task
openvasmd --stop-task TASK_IDStop a running scan task

Step-by-Step Guide

  1. 1Execute gvm-setup if you are initializing the engine for the first time
  2. 2Launch the service background daemons using gvm-start
  3. 3Log into the Greenbone web dashboard located at https://127.0.0.1:9392
  4. 4Define your target IP addresses or subnets within the asset management menu
  5. 5Initiate a new scanning task and monitor its progression
  6. 6Export the final comprehensive security report

Use Cases

Network Scanning

Comprehensive vulnerability scanning of network ranges.

Compliance Auditing

Verify systems meet security compliance standards.

Authenticated Scanning

Deep scanning with login credentials for thorough assessment.

Report Generation

Generate professional vulnerability reports.

Key Features

Related Tools

Nessus

Vulnerability Analysis

Commercial vulnerability scanner.

Lynis

Vulnerability Analysis

Host-based security auditing.

Frequently Asked Questions

What is OpenVAS used for?

OpenVAS is a full-featured vulnerability scanner that checks endpoints against thousands of active vulnerability feeds. It provides comprehensive network vulnerability assessments with a web-based interface.

How do I set up OpenVAS?

Install with 'sudo apt install openvas' then run 'sudo gvm-setup' to initialize. Start with 'gvm-start' and access the web interface at https://127.0.0.1:9392.

Is OpenVAS as good as Nessus?

OpenVAS is a capable open source alternative to Nessus. It provides comprehensive scanning with thousands of vulnerability tests, though Nessus may have more up-to-date commercial feeds.

How long does an OpenVAS scan take?

A full scan can take several hours depending on the target range and scan configuration. Use scan profiles to control scan intensity and duration.

How do I install OpenVAS on Kali Linux?

Install using: sudo apt install openvas && sudo gvm-setup. The setup process downloads vulnerability feeds and initializes the database, which may take 30-60 minutes.

How do I start OpenVAS?

Run sudo gvm-start to launch OpenVAS services. Access the web interface at https://127.0.0.1:9392. Default credentials are admin/admin.

What are the most common OpenVAS commands?

Common commands include: sudo gvm-setup (initial setup), sudo gvm-start (start services), sudo gvm-feed-update (update feeds), gvm-checksetup (verify installation).

How do I update OpenVAS feeds?

Run sudo gvm-feed-update to download the latest vulnerability tests. Update regularly to catch new vulnerabilities.

How does OpenVAS compare to Nessus?

OpenVAS is free and open source with 50,000+ vulnerability tests. Nessus is commercial with faster updates and better support. OpenVAS is a strong alternative for budget-conscious organizations.

Is OpenVAS legal to use?

OpenVAS itself is legal software. However, scanning networks without permission from the owner may violate laws. Always obtain written authorization before scanning.

What are OpenVAS system requirements?

OpenVAS requires at least 4GB RAM, 50GB disk space, and a multi-core CPU. It runs best on dedicated systems or VMs with sufficient resources.

How do I run a scan in OpenVAS?

Access the web interface, create a target, configure a scan task, and start it. Results appear in the reports section with detailed vulnerability information.

What is the Greenbone Security Assistant?

Greenbone Security Assistant (GSA) is the web interface for OpenVAS/GVM. It provides a GUI for configuring scans, viewing reports, and managing assets.

How do I configure scan intensity in OpenVAS?

Use scan profiles to control intensity. The 'Fast Scan' profile is quick but less thorough; 'Full and Fast' provides comprehensive scanning.

What output formats does OpenVAS support?

OpenVAS supports PDF, HTML, XML, CSV, and NBE report formats. Generate reports from the web interface after scan completion.

How do I check OpenVAS installation?

Run gvm-checksetup to verify the installation. It checks dependencies, feeds, and services to ensure everything is configured correctly.

What are OpenVAS scan types?

OpenVAS supports host discovery, port scanning, OS detection, vulnerability scanning, and authenticated scanning. Configure scan types through the web interface.

How do I access OpenVAS web interface?

Start OpenVAS with gvm-start and access https://127.0.0.1:9392 in your browser. Use default credentials admin/admin for first login.

Tags

#vulnerability-analysis#network-scanner#enterprise-audit#gvm

Ethical Usage Notice

This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.