Affichage des articles dont le libellé est OpenVAS. Afficher tous les articles
Affichage des articles dont le libellé est OpenVAS. Afficher tous les articles

How to Use OpenVAS in Metasploit- OpenVAS & Metasploit Integration

Metasploit includes an OpenVAS module, which allow you to interact with an OpenVAS server to create targets, run scans, download reports, and import reports. Recently I had the opportunity to make some updates to the module and wanted to write a blog post to document how to use it. This blog post does not cover how to setup an OpenVAS server but you can find that info here and here. 


To use the OpenVAS integration you need to load the openvas module within msfconsole. Do this by running the command load openvas. The updates to the openvas module were accepted in revision 13851, so you may need to use msfupdate to get the updated modules.
After the module is loaded, the work flow is very basic. Start by connecting to the server using the command openvas_connect. If you connect to a host other than localhost or 127.0.0.1, then you will need to pass an additional paramater of “ok” to the command. If you forget the “ok” parameter you will be warned that there is no SSL support and your interaction with the server is not secure. Also, you need to use the port for the OpenVAS manager server, openvasmd, which defaults to 9390.

msf > openvas_connect sbh sbh 127.0.0.1 9390
[*] Connecting to OpenVAS instance at 127.0.0.1:9390 with username sbh...
[+] OpenVAS connection successful
Next, create a target to scan using the command openvas_target_create. If you want spaces in the name or comment then make sure you place quotations around them.
msf > openvas_target_create "Local Machine" 192.168.70.128 "My Local Machine"
[*] OK, resource created: db1175ac-b40b-4b13-9a80-24b68c2c6b40
[+] OpenVAS list of targets

ID  Name           Hosts           Max Hosts  In Use  Comment
--  ----           -----           ---------  ------  -------
0   Localhost      localhost       1          1
1   Local Machine  192.168.70.128  1          0       My Local Machine
Next, create a task by specifying a target and a configuration. Use the command openvas_config_list to get a list of configurations and the command openvas_target_list to get a list of targets.
msf > openvas_config_list
[+] OpenVAS list of configs

ID  Name
--  ----
0   Full and fast
1   Full and fast ultimate
2   Full and very deep
3   Full and very deep ultimate
4   empty

msf > openvas_task_create "Local Scan" "Scan My Local Machine" 0 1
[*] OK, resource created: 483c6f03-6490-4de2-bd81-c1c5b217d950
[+] OpenVAS list of tasks

ID  Name        Comment                Status  Progress
--  ----        -------                ------  --------
0   Local Scan  Scan My Local Machine  New     -1
Next, start the task with openvas_task_start and watch the progress using openvas_task_list.
msf > openvas_task_start 0
[*] OK, request submitted
msf > openvas_task_list
[+] OpenVAS list of tasks

ID  Name        Comment                Status   Progress
--  ----        -------                ------   --------
0   Local Scan  Scan My Local Machine  Running  2

msf > openvas_task_list
[+] OpenVAS list of tasks

ID  Name        Comment                Status   Progress
--  ----        -------                ------   --------
0   Local Scan  Scan My Local Machine  Running  98

msf > openvas_task_list
[+] OpenVAS list of tasks

ID  Name        Comment                Status  Progress
--  ----        -------                ------  --------
0   Local Scan  Scan My Local Machine  Done    -1
Once the scan is finished, the progress is -1, list the available reports using openvas_report_list.
msf > openvas_report_list
[+] OpenVAS list of reports

ID  Task Name     Start Time                Stop Time
--  ---------     ----------                ---------
0   Example task  Tue Aug 25 21:48:25 2009  Tue Aug 25 21:52:16 2009
1   testtask      Fri Sep 16 14:21:31 2011  Fri Sep 16 14:23:09 2011
2   Local Scan    Fri Oct  7 22:52:46 2011  Fri Oct  7 23:04:48 2011
Next, you can download (openvas_report_dowload) or import (openvas_report_import) the report. You must specify the report format with either command. You can get a list of formats using openvas_format_list. When importing a report you must use the NBE format. Also note, that when trying to download an ITG or PDF report my OpenVAS server returns an empty report, YMMV.
msf > openvas_format_list
[+] OpenVAS list of report formats

ID  Name   Extension  Summary
--  ----   ---------  -------
0   CPE    csv        Common Product Enumeration CSV table.
1   HTML   html       Single page HTML report.
2   ITG    csv        German "IT-Grundschutz-Kataloge" report.
3   LaTeX  tex        LaTeX source file.
4   NBE    nbe        Legacy OpenVAS report.
5   PDF    pdf        Portable Document Format report.
6   TXT    txt        Plain text report.
7   XML    xml        Raw XML report.

msf > openvas_report_download 2 1 /root/ov/reports
[*] Saving report to /root/ov/reports/report-d76434b0-38e6-462c-87e1-717622056e86.html

msf > openvas_report_import 2 4
[*] Importing report to database.
You can see all the available commands using the command openvas_help. If you have any questions or find any bugs in the openvas module let me know at averagesecurityguy [at] gmail [dot] com so I can fix them. If you want to look at the code, it is in /opt/framework/msf3/plugins/openvas.rb and /opt/framework/msf3/lib/openvas/openvas-omp.rb. Enjoy.

About the Author
Stephen has over ten years experience in the information technology field working as a programmer, technical trainer, network operations manager, and information security consultant. He holds a Bachelor of Science in Math and a number of industry certifications, including the Certified Information Systems Security Professional(CISSP), Offensive Security Certified Professional(OSCP), and GIAC Penetration Tester(GPEN).

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.
Read more

by Malik korrich ~ jeudi 17 novembre 2011 0 commentaires

Metasploit Tutorials From Beginner to Advance

Metasploit the database of all the exploits or a master of exploits, there are different tutorials of metasploit are available on Internet some of them are very useful. You can find different tutorials of metasploit with other tools like Nmap, Nessus, Nexpose and OpenVAS and we have also shared different tutorials for metasploit both videos and text based tutorial. This article will not discuss the new tutorial of metasploit but this article is a sort of index page for metasploit tutorial.

As we have shared a list of backtrack 5 tutorial so here is the list of metasploit tutorial that will help a newbie or a professional to learn and to implement metasploit rules in the real penetration testing environment.

Metasploit- An Introduction

Armitage - Cyber Attack Management

Integrate Nessus With Metasploit- Tutorial

How To Use Armitage In Backtrack 5- Tutorial

Fast Track Hacking-Backtrack5 Tutorial

Metasploit 4 Advance Penetration Testing Tool

Karmetasploit- Backtrack 5 Tutorial

Social Engineering toolkit Tutorial-Backtrack 5

Metasploit Autopwn With Nessus Backtrack 5 Tutorial

Autopwn Metasploit Backtrack 5- Postgresql Solved

Metasploit Remote Desktop Exploit-Backtrack 5

Nexpose Vulnerability Scanner Tutorial- Linux Backtrack

Nessus With Metasploit Tutorial- Backtrack 5 Video Tutorial


This will be update as soon as new article will be publish so keep in touch to learn more to learn hacking and penetration testing with metasploit on backtrack machine.


Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.
Read more

by Malik korrich ~ samedi 22 octobre 2011 0 commentaires

Nexpose Vulnerability Scanner Tutorial- Linux Backtrack

Nessus is one of the best vulnerability scanner and vulnerability management but if you are open source lover than you can choose OpenVAS (a vulnerability scanner), Nessus and openVAS are not only a player in vulnerability scanning and management there is another tool for vulnerability scanning called Nexpose. Although Nessus and OpenVAS are available on backtrack 5 and can be integrate with metasploit for the best result, but in some cases we need more results so it is possible to use maximum vulnerability scanning tool in the process of penetration testing and ethical hacking.
  


After different tutorial of Nessus and Metasploit in backtrack machine we have decided to share something about nexpose, however I have used Nessus for a year but now decided to test Nexpose because of Rapid7. Nexpose vs Nessus is totally another topic that we will discuss here but in my views Nexpose and nessus approximately provide the same result but it is good to use different tool.

What Is Nexp0se?

Rapid7 Nexpose, which received the highest rating of “Strong Positive” in Gartner’s Marketscope for Vulnerability Assessment 2011, supports the entire vulnerability management lifecycle, including discovery, detection, verification, risk classification, impact analysis, reporting and mitigation.
There are different version of Nexp0se are available like Nexp0se enterprise, Nexpose consultant and others. Nexp0se community is a free edition for home and small business.

Download Free Nexp0se


Download a copy of Nexpose that highly suite your operating system. Nexpose installation manual can also be find on the same link.

How to Install Nexp0se on Linux?


This tutorial is for Linux operating system, in this tutorial I will show you how to install Nexp0se in backtrack 5, however if you are using another Linux distribution like Ubuntu, Gnacktrack, Backbox, Blackbuntu and other you can follow the same tutorial to get Nexp0se on your computer.
Nexpose requires some dependencies on the terminal type.
root@bt:~# dpkg -i libstdc++5_3.3.6-20_i386.deb

After that locate the directory where you have downloaded Nexpose and on the terminal type.
root@bt:~/Downloads# sh NeXposeSetup-Linux32.bin
On the next tutorial on Nexpose we will show you how to integrate Nexpose on Metasploit or how to use Nexpose in metasploit.


Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.
Read more

by Malik korrich ~ mercredi 12 octobre 2011 0 commentaires

Backtrack 5- OpenVas Tutorial

OpenVas is a open source vulnerability assesment system just like nessus, openVas used to find the vulnerabilities on a computer system, it is open source so you dont need to buy it, however you can get home feed of nessus for free too, but we consider both of them. If you want to know more about OpenVas than click here, and for nessus click here.

You can find nessu on backtrack 5 but you have to install openvas on backtrack5, so below is the tutorial for Openvas it includes how to install openvas in backtrack 5 and some basic usage.


Backtrack5 is not necessary to run openvas, if you are using some other version of backtrack or if you are using some other distro like Ubuntu than the procedure is same.


How To Install OpenVas
  • Open terminal on bt5 or ubuntu and type exactly
root@bt:~# apt-get install openvas
root@bt:~# sudo apt-get update
  • It begins your openvas installation and update all the applications. When Openvas has been installed you can find it on Application --> Backtrack --> Vulnerability assessment --> vulnerability scanner --> Openvas . See the picture.



  • On the next step click on openvas-check-setup, it will show you the problem and suggest some solution.
  • Its time to add user, from the menu select Openvas adduser, enter the login name and password, for rule type ctrl-d.

  • Now click on OpenVas NVT sync, by this you will get the latest NVT's from openvas database, you must do this step frequently to make update your Openvas.
  • Start openvas scanner from the menu, it may takes some time.
  • Open terminal for setting up openvas manager, use the command 
root@bt:~# openvas-mkcert-client -n om -i
rebuild the database by the command 
root@bt:~# openvasmd --rebuild
  • On the terminal type the command to set openvas administrator 
root@bt:~# openvasad -c 'add_user' -n openvasadmin -r Admin
  • Now click on start Openvas manager from the menu and use the command. 
root@bt:~# openvasmd -p 9390 -a 127.0.0.1
  • Start openvas administrator from the menu and type
root@bt:~# openvasad -a 127.0.0.1 -p 9393
Your are almost done, just start Greenbone security assistant and use
root@bt:~# gsad --http-only --listen=127.0.0.1 -p 9392
  • Now open your web browser and type http://127.0.0.1:9392/
  • Use your username and password that has been set on previous step.
Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.
Read more

by Malik korrich ~ dimanche 26 juin 2011 0 commentaires

OpenVAS- Vulnerability Assessment System

Automatic vulnerability scanning tools has a great importance in the field of penetration testing/ethical hacking, professional uses different tools for different environment.
There are different vulnerability assessment tools available as open source and as commercial tool.

This post will talk about the new open source project called OpenVAS, it has been developed to take the place of nessus. It is highly recommended to read about these two articles before reading about openVAS. 

The Open Vulnerability Assessment System (OpenVAS) is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution. Just like a nessus it has also some feeds, and the daily updated feed of Network Vulnerability Tests (NVTs), over 20,000 in total (as of January 2011). OpenVAS is a open source means freely available and it is the key difference between OpenVAS and nessus.

OpenVAS has a server/client architecture that comprises several components. On the server (Linux only), you need four packages:

  • OpenVAS-Server: The basic scanning functionality
  • OpenVAS-Plugins: A set of NVTs
  • OpenVAS-LibNASL and OpenVAS-Libraries: Required for server functionality
  • OpenVAS-Client


OpenVAS has a great features but the key feature that we discuss here is about integration of nikto scanner with OpenVAS, nikto is a open source web vulnerability scanner tool, for more about nikto click here. OpenVAS is able to recognise an installed version of Nikto and can integrate the results of a Nikto scan in the scan results. To learn more about this integration click here.


Download OpenVAS
OpenVAS 4.0 Packages




Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.
Read more

by Malik korrich ~ mercredi 27 avril 2011 0 commentaires

« Articles plus anciens