Perform open-source OpenVAS tool for vulnerability scanning

Welcome!

You are a Junior Vulnerability Assessment Analyst at CyberSecure Solutions. The organization wants to identify security weaknesses in its systems before they can be exploited by attackers.

Your task is to use the open-source OpenVAS vulnerability scanner to perform a security assessment of an authorized training target, identify vulnerabilities and outdated services, analyze the scan results, and understand the potential risks associated with the findings.

The assessment must be performed only against the authorized training environment provided by the instructor.

Topic : Vulnerability Scanning and Assessment Tools

1) Vulnerability scanning using Nessus/OpenVAS

2) Basic exploitation methods

understand the potential risks associated with the findings.

The assessment must be performed only against the authorized training environment 

provided by the instructor.

Downloaded and started the Greenbone/OpenVAS virtual appliance in VirtualBox. The VM is running and showing:

Open VirtualBox

Select the OpenVAS/Greenbone VM

Click Start

Wait until the Greenbone OS finishes booting

Look for the IP address displayed on the console

Record the IP address

A certificate warning does not automatically mean the scanner is malicious. In a controlled lab, we need to verify that the address is our own OpenVAS VM before proceeding

In your lab:

OpenVAS IP = 192.168.0.240 On the Windows host, open Chrome/Firefox

https://192.168.0.240

Use the administrator account that was configured for your Greenbone installation.

The exact address shown by your appliance. You should get the Openvas web interface.

• Dashboard
• Scans
• Targets
• Tasks
• Reports
• Vulnerabilities
• Assets
• Administration

New task and New target

• Name: metasploitable2
• Comment: scan
• Host: 192.168.0.93

Depending on the target and scan configuration, the scan can take considerable time. They may see a progress percentage.

• Vulnerability name
• Severity
• Host
• Port
• Description
• Scan type
• Detection information
• Recommended remediation

Great job!

You have successfully completed your first lab on Vulnerability Scanning Using OpenVAS.

In this lab, you have: Set up and used the open-source OpenVAS vulnerability scanner, Performed a vulnerability scan against an authorized training target, Identified security vulnerabilities and outdated services, Analyzed scan results, and Evaluated the potential risks associated with the identified findings.

You are now ready to move to the next stage of vulnerability assessment and security testing.

Topic : Web Application Testing Techniques

1) Manual vulnerability testing techniques

2) Introduction to Burp Suite