Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openvas]

.Open Source tool for automated vulnerability scanning

11
votes
4answers
96k views

Reset admin password of OpenVAS

When I installed OpenVAS, I was prompted for a password, however the prompt errored out. I have installed OpenVAS and it is working properly, however I cant get in as admin (I created a new user and ...
5
votes
2answers
2k views

Is it worth running nessus as well as OpenVAS?

Apparently OpenVAS originated as a fork of Nessus. It is very easy to install and use OpenVAS because it's, well, open. However, am I kidding myself if I just use that instead of Nessus? Should I ...
2
votes
2answers
3k views

openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?

I performed a openVAS scan on a Windows Server 2008 R2 and got a report for a high threat level vulnerability called Microsoft RDP Server Private Key Information Disclosure Vulnerability. An remote ...
2
votes
1answer
2k views

Openvas 9 LDAP Authentication

I am trying to configure Openvas 9 to use LDAP, for the login to the Greenbone software. It appears as based off of other threads, this issue with LDAP in unresolved unless I am seriously mistaken. ...
1
vote
2answers
8k views

OpenVAS on CentOS7 Redis won't start

I am trying to get OpenVAS working per the the article below. https://www.atlantic.net/community/howto/install-openvas-vulnerability-scanner-centos-7 However it isn't working, when I run openvas-...
1
vote
2answers
10k views

How do I manually install and update plugin in OpenVAS3 without rsync?

I've been assigned a task of penetration testing a server using OpenVAS3. However, I am behind a corporate firewall and OpenVAS3 uses rsync to perform updates from rsync://rsync.openvas.org:/nvt-feed ...
1
vote
1answer
4k views

OpenVAS Feed Status: How to check the automatic synchronization?

I've just installed OpenVAS ... however when I checked on Feed Status, I found that OpenVAS CERT Feed is too old as shown in the screenshot below. Too old (14 days) - Please check the automatic ...
1
vote
1answer
1k views

OpenVAS 7 failing to SSH into a test server

My local machine is hosting a Kali VM. I am trying to run local security tests using the VM's OpenVAS 7 on a server running Ubuntu 12.04.5. When I run SSH Authorization Test I get the following ...
1
vote
2answers
1k views

Lightweight alternatives to openvas [closed]

Are there any lightweight alternatives to openvas? openvas is decent, but is quite resource-hungry. The server is starting slow when there are lots of plugins. The GTK client eats 100% of CPU when ...
1
vote
0answers
244 views

OpenVas report directory

Could anyone please tell me where the reports generated by the OpenVas is stored in harddrive. I know the report can be downloaded from the web interface, but I really need to know its location in ...
1
vote
0answers
467 views

OpenVAS With NVT Feed Sync Error on Kail Linux and Ubuntu

Recently installed OpenVAS on Kail Linux and Ubuntu from ISO but have been running into an issue with the sync process. When installed onto VMware Workstation via Kail VM image updates the openvas-...
1
vote
1answer
115 views

How can I add credentials for the enable password level of access to Cisco routers for openvas?

I just started playing with the OpenVAS virtual appliance. So I added credentials for ssh which will be used to access Cisco routers: So this will let OpenVAS login to user mode, but how will it ...
1
vote
1answer
3k views

Openvas ldap authentication configuration

I'm stuck in the process of Openvas ldap authentication configuration. I use the following openvas components version from upstream: openvas libraries - 8.0.3 openvas manager - 6.0.3 (both ...
1
vote
1answer
543 views

openVAS scan against new instance fails test (possible false positive) How to debug plug-in

I have openVAS installed from the atomic corp YUM repo, and it all seems to be functioning wonderfully, however I am seeing a single "Security Hole" which is that OpenVAS detects that "arora" is ...
1
vote
2answers
880 views

How to disable TCP timestamps on a Mikrotik router?

I'm using OpenVAS as vulnerability scanner and I completed a local network scanning which also involves a MikroTik router as default gateway. The router shows a weakness, better known as "TCP ...
0
votes
2answers
725 views

Redis fails only at startup

Redis fails to start every time I start our CentOS 7/openvas server. After the server boots up I can manually start redis without any issues using systemctl start redis.service. Below are the ...
0
votes
1answer
1k views

Warning: SecInfo Database Missing even though Feeds appear to be downloaded

I get the "SecInfo Database Missing" error: SCAP and/or CERT database missing on OMP server. Even though I manually started a sync task and in the status it appears they are all complete (and have ...
0
votes
0answers
464 views

Why does OpenVAS only listening to 127.0.0.1?

I've just installed OpenVAS in Ubuntu Server inside VirtualBox which was installed without GUI. The only way to access this box is via SSH. Once OpenVAS installation completed, I tried to access it ...
0
votes
1answer
243 views

“Critical” vulnerability rating on OpenVAS 9

I'm using OpenVAS 9 and I noticed that all the vulnerabilities ranking from 7.0 to 10.0 are labeled as "High". Is there a way to change this behavior, so that all the ones ranking from 9.0 to 10.0 ...
0
votes
1answer
182 views

Openvas 9 - Continual logouts due to “Server reached connection limit (closing inbound connection)”

I keep having issues with getting logged out of Openvas/Greenbone Security Assistant, and after monitoring the logs while I was trying to run a scan, I finally noticed these lines that corresponded ...
0
votes
0answers
939 views

Alive Test “Scan Config Default” set to TCP ping in OpenVAS 9?

I recently created an internal network with VirtualBox for scanning purposes. I installed three virtual machines and I organized my internal network in two subnets. It's a quick and easy solution ...
0
votes
1answer
1k views

Changing password in OpenVAS command line

I've been trying to find the right OAP command for changing the password for OpenVAS users. It is possible to change it the Greenbone Security Assistent interface. But i can't find it for doing it ...
0
votes
1answer
1k views

Missing Dependency Errors when Installing OpenVas Server

I'm trying to install OpenVAS on Red Hat Enterprise Linux 5.5. I've successfully run yum install openvas-client, but yum install openvas-server prints the following errors: --> Finished Dependency ...