Questions tagged [openvas]

.Open Source tool for automated vulnerability scanning

Filter by
Sorted by
Tagged with
17 votes
4 answers
136k views

Reset admin password of OpenVAS

When I installed OpenVAS, I was prompted for a password, however the prompt errored out. I have installed OpenVAS and it is working properly, however I cant get in as admin (I created a new user and ...
Sugitime's user avatar
  • 415
5 votes
2 answers
2k views

Is it worth running nessus as well as OpenVAS?

Apparently OpenVAS originated as a fork of Nessus. It is very easy to install and use OpenVAS because it's, well, open. However, am I kidding myself if I just use that instead of Nessus? Should I ...
kdt's user avatar
  • 1,410
2 votes
2 answers
3k views

openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?

I performed a openVAS scan on a Windows Server 2008 R2 and got a report for a high threat level vulnerability called Microsoft RDP Server Private Key Information Disclosure Vulnerability. An remote ...
hub's user avatar
  • 342
2 votes
1 answer
6k views

Warning: SecInfo Database Missing even though Feeds appear to be downloaded

I get the "SecInfo Database Missing" error: SCAP and/or CERT database missing on OMP server. Even though I manually started a sync task and in the status it appears they are all complete (and have ...
THE JOATMON's user avatar
2 votes
1 answer
3k views

Openvas 9 LDAP Authentication

I am trying to configure Openvas 9 to use LDAP, for the login to the Greenbone software. It appears as based off of other threads, this issue with LDAP in unresolved unless I am seriously mistaken. ...
Steve G's user avatar
  • 21
1 vote
3 answers
12k views

OpenVAS on CentOS7 Redis won't start

I am trying to get OpenVAS working per the the article below. https://www.atlantic.net/community/howto/install-openvas-vulnerability-scanner-centos-7 However it isn't working, when I run openvas-...
Thorin's user avatar
  • 209
1 vote
3 answers
17k views

OpenVAS Feed Status: How to check the automatic synchronization?

I've just installed OpenVAS ... however when I checked on Feed Status, I found that OpenVAS CERT Feed is too old as shown in the screenshot below. Too old (14 days) - Please check the automatic ...
Sabrina's user avatar
  • 190
1 vote
2 answers
11k views

How do I manually install and update plugin in OpenVAS3 without rsync?

I've been assigned a task of penetration testing a server using OpenVAS3. However, I am behind a corporate firewall and OpenVAS3 uses rsync to perform updates from rsync://rsync.openvas.org:/nvt-feed ...
Charles Ma's user avatar
1 vote
1 answer
2k views

OpenVAS 7 failing to SSH into a test server

My local machine is hosting a Kali VM. I am trying to run local security tests using the VM's OpenVAS 7 on a server running Ubuntu 12.04.5. When I run SSH Authorization Test I get the following ...
Wesley Botham's user avatar
1 vote
2 answers
2k views

Lightweight alternatives to openvas [closed]

Are there any lightweight alternatives to openvas? openvas is decent, but is quite resource-hungry. The server is starting slow when there are lots of plugins. The GTK client eats 100% of CPU when ...
Anonymous's user avatar
  • 1,570
1 vote
0 answers
734 views

Azure SQL Database firewall allows TCP connections when they should be blocked

I am looking at a particular Azure SQL Database that has Server level firewall rules. I am told there are no database level firewall rules. Nmap reported open ports on the database even though the ...
M6rk's user avatar
  • 63
1 vote
0 answers
1k views

SOLVED - Kali linux openvas installation fail

I have Kali 2019.4 installed into a Virtualbox machine (4GB, 2-CPU) fully updated and upgraded. I'm trying to install openvas directly from the Kali repository (apt install openvas) as root, but it ...
kappa's user avatar
  • 111
1 vote
0 answers
481 views

OpenVas report directory

Could anyone please tell me where the reports generated by the OpenVas is stored in harddrive. I know the report can be downloaded from the web interface, but I really need to know its location in ...
Nishan Maharjan's user avatar
1 vote
1 answer
2k views

OpenVAS With NVT Feed Sync Error on Kail Linux and Ubuntu

Recently installed OpenVAS on Kail Linux and Ubuntu from ISO but have been running into an issue with the sync process. When installed onto VMware Workstation via Kail VM image updates the openvas-...
Steve Hulsberg's user avatar
1 vote
1 answer
346 views

How can I add credentials for the enable password level of access to Cisco routers for openvas?

I just started playing with the OpenVAS virtual appliance. So I added credentials for ssh which will be used to access Cisco routers: So this will let OpenVAS login to user mode, but how will it ...
red888's user avatar
  • 4,243
1 vote
1 answer
5k views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
Vitenberg's user avatar
1 vote
1 answer
639 views

openVAS scan against new instance fails test (possible false positive) How to debug plug-in

I have openVAS installed from the atomic corp YUM repo, and it all seems to be functioning wonderfully, however I am seeing a single "Security Hole" which is that OpenVAS detects that "arora" is ...
Tom's user avatar
  • 11.3k
1 vote
1 answer
2k views

Missing Dependency Errors when Installing OpenVas Server

I'm trying to install OpenVAS on Red Hat Enterprise Linux 5.5. I've successfully run yum install openvas-client, but yum install openvas-server prints the following errors: --> Finished Dependency ...
David's user avatar
  • 11
1 vote
2 answers
3k views

How to disable TCP timestamps on a Mikrotik router?

I'm using OpenVAS as vulnerability scanner and I completed a local network scanning which also involves a MikroTik router as default gateway. The router shows a weakness, better known as "TCP ...
L.Bas's user avatar
  • 13
0 votes
0 answers
1k views

gvmd service not starting after postgresql replication - openvas

I deployed two openvas servers on two distinct VMs (Debian 10) with postgresql version 11. I replicated the postgres 11 using with hot standby configuration, the data is getting replicated but after ...
xchan4's user avatar
  • 1
0 votes
0 answers
219 views

ssh tunnel from nagios to greenbone socket

i got 2 servers running. serverA is a monitoring solution check_mk. serverB is a vulnerability scanner with gvm20.08 (openVAS). On my monitoring side i want to retrieve scans, tasks, targets etc. from ...
alessio's user avatar
  • 11
0 votes
1 answer
1k views

"Critical" vulnerability rating on OpenVAS 9

I'm using OpenVAS 9 and I noticed that all the vulnerabilities ranking from 7.0 to 10.0 are labeled as "High". Is there a way to change this behavior, so that all the ones ranking from 9.0 to 10.0 ...
Riccardo M.'s user avatar
0 votes
1 answer
509 views

Openvas 9 - Continual logouts due to "Server reached connection limit (closing inbound connection)"

I keep having issues with getting logged out of Openvas/Greenbone Security Assistant, and after monitoring the logs while I was trying to run a scan, I finally noticed these lines that corresponded ...
4oo4's user avatar
  • 303
0 votes
4 answers
6k views

Redis fails only at startup

Redis fails to start every time I start our CentOS 7/openvas server. After the server boots up I can manually start redis without any issues using systemctl start redis.service. Below are the ...
thebitguru's user avatar
0 votes
1 answer
2k views

Changing password in OpenVAS command line

I've been trying to find the right OAP command for changing the password for OpenVAS users. It is possible to change it the Greenbone Security Assistent interface. But i can't find it for doing it ...
Lodoss's user avatar
  • 13