openvas in msf

1. 创建管理员
    root@kali:~# openvasad -c 'add_user' -n admin -r 'Admin'
    Enter password:
    ad   main:MESSAGE:4246:2014-08-10 02h39.54 UTC: No rules file      provided, the new user will have no restrictions.
    ad   main:MESSAGE:4246:2014-08-10 02h39.54 UTC: User admin has been successfully created.
2. openvas-nvt-sync更新plugins
3. 在menu中选择Kali Linux => Vulnerability Analysis => OpenVas中选择         openvas start
    Starting OpenVas Services
    Starting Greenbone Security Assistant: gsad.
    Starting OpenVAS Scanner: openvassd.
    Starting OpenVAS Administrator: openvasad.
    Starting OpenVAS Manager: openvasmd.
4. 启动msf
5. load openvas
6. 连接到openvas服务
    msf > load openvas

Welcome to OpenVAS integration by kost and averagesecurityguy.

OpenVAS integration requires a database connection. Once the

database is ready, connect to the OpenVAS server using openvas_connect.

For additional commands use openvas_help.

Successfully loaded plugin: OpenVAS

7. 然后可以使用openvas_help
8. openvas_connect admin admin localhost 9390 ok
9. 创建一个target
    openvas_target_create ubuntu 192.168.59.134 111
10. 创建一个task
    openvas_task_create scan scan 0 2
11. 启动一个task
    openvas_task_start 1
12. 查看task的状态
    msf > openvas_task_list
    [+] OpenVAS list of tasks

    ID Name Comment Status Progress
    -- ---- ------- ------ --------
    0   1~~   xxoo     Done    -1
    1   scan scan     Done    -1
13. 列出报告format
    msf > openvas_format_list
    [+] OpenVAS list of report formats

    ID Name   Extension Summary
    -- ----   --------- -------
    0   ARF    xml        Asset Reporting Format v1.0.0.
    1   CPE    csv        Common Product Enumeration CSV table.
    2   HTML   html       Single page HTML report.
    3   ITG    csv        German "IT-Grundschutz-Kataloge" report.
    4   LaTeX tex        LaTeX source file.
    5   NBE    nbe        Legacy OpenVAS report.
    6   PDF    pdf        Portable Document Format report.
    7   TXT    txt        Plain text report.
    8   XML    xml        Raw XML report.
14. download报告
    msf > openvas_report_download 2 1 /root/ openvas.html

15. 还可以使用openvas的gsd观察进度

16. 连接数据库（如何创建，连接数据库及常见错误情况前一篇blog）
    db_connect postgres:[email protected]/pentest
17. 将report 导入数据库
    msf > openvas_report_import 3 8

Importing report to database.

openvas只支持导入NBE 和 XML格式

18. 查看结果
    msf > hosts

    Hosts
    =====

    address         mac name os_name os_flavor os_sp purpose info comments
    -------         --- ---- ------- --------- ----- ------- ---- --------
    192.168.59.134             Unknown                    device

猜你喜欢