介绍
系统环境：
Open Vas的工作结构：
Open Vas扫描插件来源：
软件环境：
1. 软件包安装
安装Open Vas：
Step 1: Configure Atomicorp Repository
(as user root, only once)
wget -q -O - http://www.atomicorp.com/installers/atomic |sh
Step 2: Quick-Install OpenVAS
(as user root, only once)
yum install openvas openvas-setup
Step 3: Quick-Start OpenVAS
( nothing to do, all is up and running directly after installation )
Step 4: Log into OpenVAS with user created in the step 2
[root@localhost ~]# ls /usr/sbin/{gsad,openvas*}
/usr/sbin/gsad
/usr/sbin/openvasad
/usr/sbin/openvas-adduser
/usr/sbin/openvasmd
/usr/sbin/openvas-mkcert
[root@localhost ~]# ls /etc/init.d/{gsad,openvas*}
/etc/init.d/gsad
/etc/init.d/openvas-scanner
[root@localhost ~]# ls /etc/openvas/
gsad_log.conf
openvasad_log.conf
[root@localhost ~]# ls /etc/sysconfig/{gsad,openvas*}
/etc/sysconfig/gsad
/etc/sysconfig/openvas-scanner
[root@localhost ~]# ls /var/log/openvas/
greenbone-nvt-sync.log
openvassd.log
2. 启动OpenVAS各组件的服务器程序
openvas-manager
openvas-scanner
gsad
openvas-administrator
[root@localhost ~]# vi /etc/sysconfig/gsad
……
GSA_ADDRESS=0.0.0.0
GSA_PORT=9392
[root@localhost ~]# /etc/init.d/gsad start
Starting greebone-security-assistant:
[root@localhost ~]# netstat -anpt | grep ":939"
tcp
tcp
tcp
tcp
3. 获取扫描插件（在线或离线方式均可）
[root@localhost ~]# openvas-nvt-sync
[root@localhost ~]# wget http://www.openvas.org/openvas-nvt-feed-current.tar.bz2
[root@localhost ~]# tar jxf openvas-nvt-feed-current.tar.bz2 -C /var/lib/openvas/plugins/nvt/
[root@localhost ~]# /etc/init.d/openvas-scanner restart
Stopping openvas-scanner:
Starting openvas-scanner:
4. 创建扫描用户、管理员用户
[root@localhost ~]# openvas-adduser
Using /var/tmp as a temporary file holder.
Add a new openvassd user
-------------------------
Login: admin
Authentication (pass/cert)[pass]:
Login password:
Login password(again):
User rules
------------
openvassd has a rules system which allows you to restrict the hosts that tsengyia has the right to test.
For instance, you may want him to be able to scan his own host only.
Please see the openvas-adduser(8) man page for the rules syntax.
Enter the rules for this user, and hit ctrl-D once you are done.
(the user can have an empty rules set)
accept 192.168.1.0/24
accept 10.10.10.0/24
default deny
Login
Password
Rules
accept 192.168.1.0/24
accept 10.10.10.0/24
default deny
Is that ok? (y/n)[y]