Title : Openvas walkthrough
Author : Farzeen ashhar
Due date : 10th Jan 2023
Publish Date :10th Jan 2023
Introduction
Name : Farzeen ashhar
From : Kerala, India
Qualification : BBA
Graduate
Graduated from : Jaipur National
University
Work Experience : 7+ years in HR
& Commercial
Work Location : United Arab
Emirates
A Cyber Security Aspirant
Hi today I am going to tell you about Openvas . So lets understand what is openvas ??
What is Openvas ?
A vulnerability scanner enables the monitoring of networks, systems, and applications for security vulnerabilities. Vulnerability management scanners like OpenVAS identify and classify potential points of weakness in your infrastructure, quantify the possible risk, and recommend mitigations to remediate the problem.
https://www.bugcrowd.com/glossary/openvas-vulnerability-scanner
Here is the problem I know about Nmap so why should I use a new tool . So let us understand the diffrence between Nmap and Openvas
Openvas is like it will scan the the IP address provided and get us all the specific information needed for the penetration test and you will be provided by a report whereas nmap sends a packet to the target and receive the target returned from the target these packet were read provide us with the output.. Nmap will not provide us with report
Lets first try scanning using Nmap
I got the result but the problem here I will have to scan it again if I need to look for something specific. I will have to scan it again or I can give an additional code > output.txt.This report will be in a file called output.txt.
Now lets try with Openvas which is a vulnerability management scanners.for this we need open the terminal and
enter sudo gvm-start
At the end you will be provided by a webisite link. https://127.0.0.1:9392/login
click on it and you will be taken into the web server
Click on scan
click on new scan and once the scan is done
Here your report is being processed just wait for few mints
click on the download icon
choose report format as pdf
Here your report has been generated
Read your Report
Disclaimer : This blog is from
within the limitation of my knowledge base I would appreciate the correction
please let me know your comments …
No comments:
Post a Comment