OpenVAS Security Tool Cheatsheet

📱 Mobile Security Tips

Sarah Chen — iOS Security Specialist

What is OpenVAS?

OpenVAS (Open Vulnerability Assessment System) is a full-featured vulnerability scanner used to detect security issues in servers and network devices. It uses a database of threats and vulnerabilities to assess the security status of systems.

Installation

To install OpenVAS on a Debian-based system, use the following commands:

sudo apt update
sudo apt install openvas

After installation, initialize OpenVAS:

sudo gvm-setup

Basic Syntax

The basic command structure for running OpenVAS scans is:

openvas-cli 

Discovery

Discovery is the first step to identify targets and gather information.

Target Identification

To define a target for scanning:

omp --create-target --name "Target_Name" --hosts "192.168.1.1"

Scanning

Setting up and executing a scan is straightforward using OpenVAS.

Initiating a Scan

Once the target is set, a scan can be run:

omp --start-task 
Flag Description
–start-task Starts a scan task

Exploitation

Post-Scan Actions

After a scan, you can retrieve the results:

omp --get-report 

Analysis

Result Analysis

To analyze vulnerabilities found during scans, generate a summary:

omp --get-report --report-id  --format PDF

Evasion

Consider tuning the scanning engine to evade detection.

Adjusting Scan Parameters

omp --update-config --parameter --value

Reporting

Generate comprehensive reports after scanning.

Creating a Report

omp --create-report --name  --target 

Quick Reference Table

Command Description
omp –create-target Create a new scanning target
omp –start-task Start a defined scan task

Pro Tips

  • Regular Updates: Always update your OpenVAS NVT feed to ensure the latest vulnerabilities are checked.
  • Use Port Scanning: Leverage port scanning options to identify open and vulnerable services.
  • Customize Reports: Tailor your reports to customer needs to enhance clarity.

Real-World Examples

For example, if you wanted to scan an external IP range, you would set up a target with the following command:

omp --create-target --name "External_Scan" --hosts "205.251.233.175/24"