OPENVAS

注意：openvas已改名为gvm，不过基本用法还是一样的，如：openvas-start=gvm-start

一、Openvas简介

• Nessus项目分支

• 管理目标系统的漏洞

• 免费开源

• Kali默认安装，但未配置和启动

• 更新很快

1、基本架构

2、OpenVAS Manager

• 控制scanner和其他manager的中心组件

• 控制中心数据库，保存用户配置及扫描结果

• 客户端使用基于XML的无状态OMP协议与其通信

• 集中排序筛选，使客户端获得一致展现

3、OpenVAS Scanner

• 具体执行Network Vulnerability Tests （NVTs）

• NVTs 每天通过 Feed 更新

• 受 Manager 控制

4、OSP Scanner

• 可以统一管理多个scanner

• 将一组 scanner 作为一个对象交给manager管理

5、Greenbone Security Assistant (GSA)

• 提供 Web service

6、OpenVAS CLI

• omp 命令行工具，可实现批处理控制 manager

二、安装

1、Kali 1.0 老版本安装基本流程

• 安装

• 创建证书

• 同步弱点数据库

• 创建客户端证书

• 重建数据库

• 备份数据库

• 启动服务装入插件

• 创建管理员账号

• 创建普通用户账号

• 配置服务侦听端口

• 安装验证

2、新版 Kali 安装

• 初始化安装

• openvas-setup

• 检查安装结果

• openvas-check-setup

• 查看当前账号

• openvasmd --list-users

• 修改账号密码（遗忘密码是可通过如下方式修改）

• openvasmd --user=admin --new-password=Passw0rd #可先通过openvasmd --get-users 查看有哪些用户名

• 升级

• openvas-feed-update

三、基本用法

1、启动服务

root@promote:/home/z9m8r8# netstat -pantu | grep 939
root@promote:/home/z9m8r8# gvm-start 
[>] Please wait for the GVM services to start.
[>]
[>] You might need to refresh your browser once it opens.
[>]
[>]  Web UI (Greenbone Security Assistant): https://127.0.0.1:9392

● greenbone-security-assistant.service - Greenbone Security Assistant (gsad)
     Loaded: loaded (/lib/systemd/system/greenbone-security-assistant.service; disabled; vendor preset: disabled)
     Active: active (running) since Tue 2022-01-25 22:04:17 CST; 25ms ago
       Docs: man:gsad(8)
             https://www.greenbone.net
    Process: 1822 ExecStart=/usr/sbin/gsad --listen=127.0.0.1 --port=9392 (code=exited, status=0/SUCCESS)
   Main PID: 1823 (gsad)
      Tasks: 3 (limit: 2255)
     Memory: 2.4M
        CPU: 31ms
     CGroup: /system.slice/greenbone-security-assistant.service
             ├─1823 /usr/sbin/gsad --listen=127.0.0.1 --port=9392
             └─1824 /usr/sbin/gsad --listen=127.0.0.1 --port=9392

1月 25 22:04:16 promote systemd[1]: Starting Greenbone Security Assistant (gsad)...
1月 25 22:04:17 promote gsad[1822]: Oops, secure memory pool already initialized
1月 25 22:04:17 promote systemd[1]: Started Greenbone Security Assistant (gsad).

● gvmd.service - Greenbone Vulnerability Manager daemon (gvmd)
     Loaded: loaded (/lib/systemd/system/gvmd.service; disabled; vendor preset: disabled)
     Active: active (running) since Tue 2022-01-25 22:04:11 CST; 15s ago
       Docs: man:gvmd(8)
    Process: 1783 ExecStart=/usr/sbin/gvmd --osp-vt-update=/run/ospd/ospd.sock (code=exited, status=0/SUCCESS)
   Main PID: 1786 (gvmd)
      Tasks: 1 (limit: 2255)
     Memory: 100.0M
        CPU: 1.433s
     CGroup: /system.slice/gvmd.service
             └─1786 gvmd: Waiting for incoming connections

1月 25 22:04:01 promote systemd[1]: Starting Greenbone Vulnerability Manager daemon (gvmd)...
1月 25 22:04:01 promote systemd[1]: gvmd.service: Can't open PID file /run/gvm/gvmd.pid (yet?) after start: Operation not permitted
1月 25 22:04:11 promote systemd[1]: Started Greenbone Vulnerability Manager daemon (gvmd).

● ospd-openvas.service - OSPd Wrapper for the OpenVAS Scanner (ospd-openvas)
     Loaded: loaded (/lib/systemd/system/ospd-openvas.service; disabled; vendor preset: disabled)
     Active: active (running) since Tue 2022-01-25 22:04:00 CST; 33s ago
       Docs: man:ospd-openvas(8)
             man:openvas(8)
    Process: 1751 ExecStart=/usr/bin/ospd-openvas --config /etc/gvm/ospd-openvas.conf --log-config /etc/gvm/ospd-logging.conf --unix-socket /run/ospd/ospd.sock --pid-file /run/ospd/ospd-openvas.pid --log-file /var/log/gvm/ospd-openvas.log --lock-file-dir /var/lib/openvas (code=exited, status=0/SUCCESS)
   Main PID: 1769 (ospd-openvas)
      Tasks: 6 (limit: 2255)
     Memory: 164.2M
        CPU: 2.587s
     CGroup: /system.slice/ospd-openvas.service
             ├─1769 /usr/bin/python3 /usr/bin/ospd-openvas --config /etc/gvm/ospd-openvas.conf --log-config /etc/gvm/ospd-logging.conf --unix-socket /run/ospd/ospd.sock --pid-file /run/ospd/ospd-openvas.pid --log-file /var/log/gvm/ospd-openvas.log --lock-file-dir /var/lib/openvas
             ├─1771 /usr/bin/python3 /usr/bin/ospd-openvas --config /etc/gvm/ospd-openvas.conf --log-config /etc/gvm/ospd-logging.conf --unix-socket /run/ospd/ospd.sock --pid-file /run/ospd/ospd-openvas.pid --log-file /var/log/gvm/ospd-openvas.log --lock-file-dir /var/lib/openvas
             ├─1811 openvas --update-vt-info
             └─1813 openvas --update-vt-info

1月 25 22:03:55 promote systemd[1]: Starting OSPd Wrapper for the OpenVAS Scanner (ospd-openvas)...
1月 25 22:04:00 promote systemd[1]: Started OSPd Wrapper for the OpenVAS Scanner (ospd-openvas).

[>] Opening Web UI (https://127.0.0.1:9392) in: 5... 4... 3... 2... 1... 
root@promote:/home/z9m8r8# netstat -pantu | grep 939  #端口的检查：
tcp        0      0 127.0.0.1:9392          0.0.0.0:*               LISTEN      1823/gsad

openvas-start 如果启动失败，可按如下修改服务启动顺序

vi /usr/bin/openvas-start

Starting OpenVas Services

Starting OpenVAS Manager: openvasmd

Starting OpenVAS Scanner: openvassd

Starting Greenbone Security Assistant: gsad