Questions tagged [openvas]
.Open Source tool for automated vulnerability scanning
25
questions
17
votes
4
answers
136k
views
Reset admin password of OpenVAS
When I installed OpenVAS, I was prompted for a password, however the prompt errored out. I have installed OpenVAS and it is working properly, however I cant get in as admin (I created a new user and ...
5
votes
2
answers
2k
views
Is it worth running nessus as well as OpenVAS?
Apparently OpenVAS originated as a fork of Nessus. It is very easy to install and use OpenVAS because it's, well, open. However, am I kidding myself if I just use that instead of Nessus? Should I ...
2
votes
2
answers
3k
views
openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?
I performed a openVAS scan on a Windows Server 2008 R2 and got a report for a high threat level vulnerability called Microsoft RDP Server Private Key Information Disclosure Vulnerability. An remote ...
2
votes
1
answer
6k
views
Warning: SecInfo Database Missing even though Feeds appear to be downloaded
I get the "SecInfo Database Missing" error:
SCAP and/or CERT database missing on OMP server.
Even though I manually started a sync task and in the status it appears they are all complete (and have ...
2
votes
1
answer
3k
views
Openvas 9 LDAP Authentication
I am trying to configure Openvas 9 to use LDAP, for the login to the Greenbone software.
It appears as based off of other threads, this issue with LDAP in unresolved unless I am seriously mistaken.
...
1
vote
3
answers
12k
views
OpenVAS on CentOS7 Redis won't start
I am trying to get OpenVAS working per the the article below.
https://www.atlantic.net/community/howto/install-openvas-vulnerability-scanner-centos-7
However it isn't working, when I run openvas-...
1
vote
3
answers
17k
views
OpenVAS Feed Status: How to check the automatic synchronization?
I've just installed OpenVAS ... however when I checked on Feed Status, I found that OpenVAS CERT Feed is too old as shown in the screenshot below.
Too old (14 days) - Please check the automatic ...
1
vote
2
answers
11k
views
How do I manually install and update plugin in OpenVAS3 without rsync?
I've been assigned a task of penetration testing a server using OpenVAS3.
However, I am behind a corporate firewall and OpenVAS3 uses rsync to perform updates from rsync://rsync.openvas.org:/nvt-feed ...
1
vote
1
answer
2k
views
OpenVAS 7 failing to SSH into a test server
My local machine is hosting a Kali VM. I am trying to run local security tests using the VM's OpenVAS 7 on a server running Ubuntu 12.04.5.
When I run SSH Authorization Test I get the following ...
1
vote
2
answers
2k
views
Lightweight alternatives to openvas [closed]
Are there any lightweight alternatives to openvas?
openvas is decent, but is quite resource-hungry.
The server is starting slow when there are lots of plugins.
The GTK client eats 100% of CPU when ...
1
vote
0
answers
734
views
Azure SQL Database firewall allows TCP connections when they should be blocked
I am looking at a particular Azure SQL Database that has Server level firewall rules. I am told there are no database level firewall rules. Nmap reported open ports on the database even though the ...
1
vote
0
answers
1k
views
SOLVED - Kali linux openvas installation fail
I have Kali 2019.4 installed into a Virtualbox machine (4GB, 2-CPU) fully updated and upgraded.
I'm trying to install openvas directly from the Kali repository (apt install openvas) as root, but it ...
1
vote
0
answers
481
views
OpenVas report directory
Could anyone please tell me where the reports generated by the OpenVas is stored in harddrive. I know the report can be downloaded from the web interface, but I really need to know its location in ...
1
vote
1
answer
2k
views
OpenVAS With NVT Feed Sync Error on Kail Linux and Ubuntu
Recently installed OpenVAS on Kail Linux and Ubuntu from ISO but have been running into an issue with the sync process.
When installed onto VMware Workstation via Kail VM image updates the openvas-...
1
vote
1
answer
346
views
How can I add credentials for the enable password level of access to Cisco routers for openvas?
I just started playing with the OpenVAS virtual appliance.
So I added credentials for ssh which will be used to access Cisco routers:
So this will let OpenVAS login to user mode, but how will it ...
1
vote
1
answer
5k
views
Openvas ldap authentication configuration
I'm stuck in the process of Openvas ldap authentication configuration.
I use the following openvas components version from upstream:
openvas libraries - 8.0.3
openvas manager - 6.0.3
(both ...
1
vote
1
answer
639
views
openVAS scan against new instance fails test (possible false positive) How to debug plug-in
I have openVAS installed from the atomic corp YUM repo, and it all seems to be functioning wonderfully, however I am seeing a single "Security Hole" which is that OpenVAS detects that "arora" is ...
1
vote
1
answer
2k
views
Missing Dependency Errors when Installing OpenVas Server
I'm trying to install OpenVAS on Red Hat Enterprise Linux 5.5. I've successfully run yum install openvas-client, but yum install openvas-server prints the following errors:
--> Finished Dependency ...
1
vote
2
answers
3k
views
How to disable TCP timestamps on a Mikrotik router?
I'm using OpenVAS as vulnerability scanner and I completed a local network scanning which also involves a MikroTik router as default gateway.
The router shows a weakness, better known as "TCP ...
0
votes
0
answers
1k
views
gvmd service not starting after postgresql replication - openvas
I deployed two openvas servers on two distinct VMs (Debian 10) with postgresql version 11. I replicated the postgres 11 using with hot standby configuration, the data is getting replicated but after ...
0
votes
0
answers
219
views
ssh tunnel from nagios to greenbone socket
i got 2 servers running. serverA is a monitoring solution check_mk. serverB is a vulnerability scanner with gvm20.08 (openVAS).
On my monitoring side i want to retrieve scans, tasks, targets etc. from ...
0
votes
1
answer
1k
views
"Critical" vulnerability rating on OpenVAS 9
I'm using OpenVAS 9 and I noticed that all the vulnerabilities ranking from 7.0 to 10.0 are labeled as "High".
Is there a way to change this behavior, so that all the ones ranking from 9.0 to 10.0 ...
0
votes
1
answer
509
views
Openvas 9 - Continual logouts due to "Server reached connection limit (closing inbound connection)"
I keep having issues with getting logged out of Openvas/Greenbone Security Assistant, and after monitoring the logs while I was trying to run a scan, I finally noticed these lines that corresponded ...
0
votes
4
answers
6k
views
Redis fails only at startup
Redis fails to start every time I start our CentOS 7/openvas server. After the server boots up I can manually start redis without any issues using systemctl start redis.service.
Below are the ...
0
votes
1
answer
2k
views
Changing password in OpenVAS command line
I've been trying to find the right OAP command for changing the password for OpenVAS users.
It is possible to change it the Greenbone Security Assistent interface. But i can't find it for doing it ...