OpenVAS (GVM) 应用
目录:
1、更新系统.
root用户ssh至kali,升级更新系统.
apt update && sudo apt upgrade
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-update-and-upgrade-kali.png)
…………………………………………………….
2、安装GVM及依赖.
apt install gvm -y
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-apt-install-gvm-y.png)
…………………………………………………….
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-apt-install-gvm-y-de.png)
…………………………………………………….
3、运行自动配置脚本.
gvm-setup
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-apt-install-gvm-gvm-setup.png)
…………………………………………………….
期间将自动下载feed订阅(各类漏洞规则)及插件,耗时较长.
注意记录自动创建的用户 ”admin“的密码 “6f3abfce-aa80-4315-b77d-5d5176cf19a7”
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-apt-install-gvm-gvm-setup-and-update-gvm-feeds-1.png)
…………………………………………………….
4、检查确认配置.
gvm-check-setup
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-apt-install-gvm-gvm-check-setup.png)
…………………………………………………….
![](https://rsrc.ink/wp-content/uploads/2024/07/image-1.png)
看起来安装没什么问题!
…………………………………………………….
5、配置远程访问web接口
编辑gsad.service 配置文件.
vi /usr/lib/systemd/system/gsad.service
注释掉 “ExecStart=/usr/local/sbin/gsad --foreground --listen=127.0.0.1 --port=9392"
新添加:
ExecStart=/usr/local/sbin/gsad --foreground --listen=0.0.0.0 --port=443
ExecStart=/usr/local/sbin/gsad --foreground --listen=0.0.0.0 --port=443
![](https://rsrc.ink/wp-content/uploads/2024/07/image-2.png)
…………………………………………………….
6、重启gsad服务.
systemctl daemon-reload
systemctl restart gsad
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-service-reload.png)
…………………………………………………….
7、配置服务开机启动.
systemctl enable notus-scanner gvmd ospd-openvas gsad
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-open-system-start-pl.png)
…………………………………………………….
8、WEB访问OpenVAS.
systemctl enable notus-scanner gvmd ospd-openvas gsad
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-service-web-accessA.png)
…………………………………………………….
用户名”admin”,密码自动生成的 “6f3abfce-aa80-4315-b77d-5d5176cf19a7”
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-service-web-accessB.png)
…………………………………………………….
进入greenbone 面板,此时可能需要一些时间,待feed更新完成!
![](https://rsrc.ink/wp-content/uploads/2024/07/image-3.png)
…………………………………………………….
![](https://rsrc.ink/wp-content/uploads/2024/07/image-4.png)
9、升级漏洞规则库
后续更新升级前需先停止GVM服务
gvm-stop
greenbone-feed-sync
![](https://rsrc.ink/wp-content/uploads/2024/07/gvm-install-apt-install-gvm-gvm-setup.png)
升级完成启动GVM服务
gvm-start
…………………………………………………….