Hack The Sec-Leading Resource Of Linux Tutorial: OpenVas

<div dir="ltr" style="text-align: left;" trbidi="on">
Install OpenVas in Centos 6/7 and Fedora 23/24 
OpenVAS (Open Vulnerability Assessment System,the name of the fork originally known as GNessUs) is a framework of several services and tools offering a vulnerability scanning and vulnerability management solution. 
All OpenVAS products are Free Software. Most components are licensed under the GPL. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt4XDZZrKy47zsbXI1ZEdj8GCh69Mke8hyphenhyphenEvhu4VtC5W1uKkabhsipVM7ki3rew5RlK2uxjwWzWCnRm7eo06UI78OiC9JlcOHPc__oFD-RmM2A1ig1FeQIgCgr5FsB0LfK1LO6CpTwzi6S/s1600/OpenVAS4-Structure_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt4XDZZrKy47zsbXI1ZEdj8GCh69Mke8hyphenhyphenEvhu4VtC5W1uKkabhsipVM7ki3rew5RlK2uxjwWzWCnRm7eo06UI78OiC9JlcOHPc__oFD-RmM2A1ig1FeQIgCgr5FsB0LfK1LO6CpTwzi6S/s1600/OpenVAS4-Structure_hackthesec.co.in.png" /></a></div>
OpenVas began, under the name of GNessUs, as a fork of the previously open source Nessus scanning tool after Tenable Network Security changed it to a proprietary (closed source) license in October 2005. OpenVAS was originally proposed by pentesters at Portcullis Computer Security and then announced by Tim Brown on Slashdot. 
 
OpenVAS is a member project of Software in the Public Interest. 
INSTALLATION 
First you need Install required packages Bellow 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">yum install wget bzip2 texlive net-tools alien</pre>
After that need to add atomic repository to install openvas as follows 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">wget -q -O - http://www.atomicorp.com/installers/atomic |sh</pre>
Now Disable The SELINUX 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">Edit /etc/selinux/config </pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
# targeted - Targeted processes are protected,
# mls - Multi Level Security protection.
SELINUXTYPE=targeted</pre>
Now install Openvas by using following command in terminal by using yum 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">yum -y install openvas</pre>
Now Edit the openvas config file and add or uncomment the following lines 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">edit /etc/redis.conf</pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">unixsocket /tmp/redis.sock
unixsocketperm 700</pre>
Restart Redis 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">systemctl enable redis && systemctl restart redis</pre>
Once All done then start the setup process by using  the command openvas-setup. This is going to take some time. You will be prompted for some information shortly 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">openvas-setup</pre>
It downloads the latest databases once it completed, enter the Administrator password 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; line-height: 1.42857; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">Step 2: Configure GSAD
The Greenbone Security Assistant is a Web Based front end
for managing scans. By default it is configured to only allow
connections from localhost.

Allow connections from any IP? [Default: yes] 
Allow connections from any IP? [Default: yes] Redirecting to /bin/systemctl restart
  gsad.service

Step 3: Choose the GSAD admin users password.
The admin user is used to configure accounts,
Update NVT's manually, and manage roles.

Enter administrator username [Default: admin] : Enter Administrator Password:
Verify Administrator Password:
Empty password not allowed.

Enter Administrator Password:
Verify Administrator Password:
Redirecting to /bin/systemctl start redis.service

Setup complete, you can now access GSAD at:
https://192.168.2.56:9392</pre>
once completed, you are able to login.Before that, we're just going to disable firewalld service. my case i have centos 7 it's depend on os version 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">systemctl stop firewalld
systemctl mask firewalld
</pre>
Or You can exception for tcp 9392 
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">firewall-cmd --permanent --zone=public --add-port=9392/tcp
firewall-cmd --reload</pre>
 
Now Go to your web browser, type the url as https://192.168.2.56:9392(In my case my ip address is 192.168.2.56) default username is admin and enter the password entered during setup, and you should be able to login. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSczFKT-um6AclB_AuWMs1-1whexF0uSOqHcTOGX-HDQdikKe6A7CERS8oAIXT3uBi3BZaX4ranoMc_4uLFXU4NY8Ecgy2gqE0Vkpcd41xZO9sbgpl0dhaY09SsZ6MB_5jqhiPX2Vtsqg5/s1600/security-alert-for-openvas_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSczFKT-um6AclB_AuWMs1-1whexF0uSOqHcTOGX-HDQdikKe6A7CERS8oAIXT3uBi3BZaX4ranoMc_4uLFXU4NY8Ecgy2gqE0Vkpcd41xZO9sbgpl0dhaY09SsZ6MB_5jqhiPX2Vtsqg5/s1600/security-alert-for-openvas_hackthesec.co.in.png" /></a></div>
After that you will see a login panel check the screenshot bellow 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNmKfuYDy50xhNm6MiA1kCUKVEWStPTifR-HQ2UclhSaNysQyJXV8fW4uU2_mFD2yhxi1Tvw_MexFi7rUPXXKxaN8mdvanL74m0Iqhm1yRHTp74Bac0F8xFJovwjmCjT-8CD048Cl7LQi-/s1600/openvas-webinterface-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNmKfuYDy50xhNm6MiA1kCUKVEWStPTifR-HQ2UclhSaNysQyJXV8fW4uU2_mFD2yhxi1Tvw_MexFi7rUPXXKxaN8mdvanL74m0Iqhm1yRHTp74Bac0F8xFJovwjmCjT-8CD048Cl7LQi-/s1600/openvas-webinterface-hackthesec.co.in.png" /></a></div>
To start a scan, enter an IP in the start scan area. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikNNbd_UUq8606k5ij7SghA-cDfHC4hmxasUL0D2bJ1s_LHJPFuk678j2OQFr_0qxOi4fhk31Fc-I6FsvvePIJ7xOKSs3CTh1Y-OlvNo4I0nsmpKaC4kuIO5jccNAAe3OzrWfwgzsjreL8/s1600/quick-scan-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikNNbd_UUq8606k5ij7SghA-cDfHC4hmxasUL0D2bJ1s_LHJPFuk678j2OQFr_0qxOi4fhk31Fc-I6FsvvePIJ7xOKSs3CTh1Y-OlvNo4I0nsmpKaC4kuIO5jccNAAe3OzrWfwgzsjreL8/s1600/quick-scan-hackthesec.co.in.png" /></a></div>
You can also configure the report format by going into Configuration section. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWJBatKxWYrb4Y8ZJlmTXxqXBrFo_W79L1x2BPn3HXcfCuh7LK9G8JBF0xVg48JwUpjB_rebHtsDHSSxTwhEfoGEWrqLG4Uz5LDGbaW_NnB96qv_cnRx_wn4aBX9s_ZEZXX8AWnjpEk4Qb/s1600/report-format-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWJBatKxWYrb4Y8ZJlmTXxqXBrFo_W79L1x2BPn3HXcfCuh7LK9G8JBF0xVg48JwUpjB_rebHtsDHSSxTwhEfoGEWrqLG4Uz5LDGbaW_NnB96qv_cnRx_wn4aBX9s_ZEZXX8AWnjpEk4Qb/s1600/report-format-hackthesec.co.in.png" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
Installation Done</div>
<div class="separator" style="clear: both; text-align: left;">
Thanks</div>
<div class="separator" style="clear: both; text-align: left;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>

How to install OpenVas in Centos 6/7 and Fedora 23/24

Install OpenVas in Centos 6/7 and Fedora 23/24 OpenVAS (Open Vulnerability Assessment System,the name of the fork originally known as GNes...