Alex Huang's Notebook

Saturday, November 5, 2022

Install OpenVAS at Kali Linux in November 2022

Use the root account to log into Kali Linux (version: 2022.3) before executing the commands below:

#apt-get update

#apt-get install gvm gvmd gvmd-common openvas openvas-scanner ospd-openvas greenbone-security-assistant

#gvm-setup

Record the password of the admin account showing up in the output of gvm-setup execution.

#gvm-check-setup

#apt-get install nsis

#gvm-stop

#sudo -u _gvm greenbone-nvt-sync

#gvm-start

Open a web browser to surf https://127.0.0.1:9392/ and utilize the said password of the admin account to log in.

Friday, October 14, 2022

[nmap] NMAP Vulnerability Scan

The document herein gathers some scenarios of utilizing Nmap as a vulnerability scanner:

Default Scenario:

Upgrade scripts:
#nmap --script-updatedb
Common Script Scan against an IP:
#nmap -sC 192.168.1.80
Vulnerability Scan:
#nmap --script vuln 10.10.10.40
Apply only those SAFE scripts to the vulnerability scan:
#nmap --script safe 10.10.10.40
Apply all scripts to scan a target:
#nmap --script all 10.10.10.40

Applying vuln script:

Install / Upgrade scripts:
#cd /usr/share/nmap/scripts/

#git clone https://github.com/vulnersCom/nmap-vulners.git

Vulnerability Scan:
#nmap --script=nmap-vulners/vulners.nse10.10.10.40

Applying vulscan script:

Install / Upgrade scripts:
#cd /usr/share/nmap/scripts/
#git clone https://github.com/scipag/vulscan

Vulnerability Scan:

#nmap --script=vulscan/vulscan.nse10.10.10.40