{"id":19499,"date":"2017-04-08T06:42:34","date_gmt":"2017-04-07T22:42:34","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/04\/08\/%e5%9c%a8-ubuntu-16-04-%e4%b8%8a%e5%ae%89%e8%a3%9d-openvas\/"},"modified":"2021-03-18T17:24:59","modified_gmt":"2021-03-18T09:24:59","slug":"%e5%9c%a8-ubuntu-16-04-%e4%b8%8a%e5%ae%89%e8%a3%9d-openvas","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/04\/08\/%e5%9c%a8-ubuntu-16-04-%e4%b8%8a%e5%ae%89%e8%a3%9d-openvas\/","title":{"rendered":"\u5728 Ubuntu 16.04 \u4e0a\u5b89\u88dd OpenVAS"},"content":{"rendered":"

\u53c3\u8003\u7db2\u9801\uff1a
openvas 8 vulnerability scanner : Mohammad Razavi<\/a>
Install OpenVAS 8 on Ubuntu 16.04<\/a>
How to Install OpenVAS Vulnerability Scanner on Ubuntu 16.04 – Vultr.com<\/a>
\u7528\u958b\u6e90\u5de5\u5177\u6aa2\u67e5\u4e3b\u6a5f\u6f0f\u6d1e \u81ea\u5efaOpenVAS\u5f31\u9ede\u6383\u63cf – \u6280\u8853\u5c08\u6b04 – \u7db2\u7ba1\u4ebaNetAdmin<\/a><\/p>\n

\u65b0\u589e OpenVAS \u5132\u5b58\u5eab
# apt install software-properties-common<\/span>
# apt-get install python-software-properties<\/span>
# add-apt-repository ppa:mrazavi\/openvas<\/span>
\u00a0OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.<\/span> <\/p>\n

Homepage: http:\/\/www.openvas.org\/<\/span> <\/p>\n

* Openvas 9 BETA is now available *<\/span> <\/p>\n

To install openvas 8, install the “openvas” package from this ppa. It is only tested on ubuntu 14.04 trusty and 16.04 xenial.<\/span> <\/p>\n

You have to update openvas scripts\/data after installation with the following commands:<\/span> <\/p>\n

sudo apt-get install sqlite3<\/span>
sudo openvas-nvt-sync<\/span>
sudo openvas-scapdata-sync<\/span>
sudo openvas-certdata-sync<\/span> <\/p>\n

sudo service openvas-scanner restart<\/span>
sudo service openvas-manager restart<\/span>
sudo openvasmd –rebuild –progress<\/span> <\/p>\n

Login into https:\/\/localhost:443 with “admin” as username and password.<\/span> <\/p>\n

In case of “Secure Connection Failed” in firefox, use chromium.<\/span> <\/p>\n

To enable pdf reports:<\/span>
sudo apt-get install texlive-latex-extra –no-install-recommends<\/span> <\/p>\n

To install openvas-nasl utility:<\/span>
sudo apt-get install libopenvas8-dev<\/span> <\/p>\n

*** Openvas 9 BETA ***<\/span> <\/p>\n

A set of new packages for openvas 9 BETA is now included. If you prefer to install them, you just have to install “openvas9” package instead of “openvas”. Then, update scripts\/data with the following commands:<\/span> <\/p>\n

sudo apt-get install sqlite3<\/span>
sudo greenbone-nvt-sync<\/span>
sudo greenbone-scapdata-sync<\/span>
sudo greenbone-certdata-sync<\/span> <\/p>\n

sudo service openvas-scanner restart<\/span>
sudo service openvas-manager restart<\/span>
sudo openvasmd –rebuild –progress<\/span> <\/p>\n

Please note that the default port number of the web interface for the new packages are changed to 4000. So, to access the web interface for version 9, go to https:\/\/localhost:4000<\/span> <\/p>\n

You can change the web interface port number by modifying \/etc\/default\/openvas-gsa. Then, restart its service by issuing “sudo service openvas-gsa restart”.<\/span>
\u00a0More info: https:\/\/launchpad.net\/~mrazavi\/+archive\/ubuntu\/openvas<\/span>
Press [ENTER] to continue or ctrl-c to cancel adding it<\/span> <\/p>\n

gpg: keyring `\/tmp\/tmp_ss7i1fn\/secring.gpg’ created<\/span>
gpg: keyring `\/tmp\/tmp_ss7i1fn\/pubring.gpg’ created<\/span>
gpg: requesting key 4AA450E0 from hkp server keyserver.ubuntu.com<\/span>
gpg: \/tmp\/tmp_ss7i1fn\/trustdb.gpg: trustdb created<\/span>
gpg: key 4AA450E0: public key “Launchpad PPA for Mohammad Razavi” imported<\/span>
gpg: Total number processed: 1<\/span>
gpg:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 imported: 1\u00a0 (RSA: 1)<\/span>
OK<\/span>
[@more@]2. \u66f4\u65b0\u5957\u4ef6\u5eab
# apt-get update<\/span> <\/p>\n

3. \u5b89\u88dd OpenVAS
# apt install openvas<\/span>
\"\" <\/a> <\/p>\n

4. \u5b89\u88dd\u5176\u5b83\u76f8\u95dc\u5957\u4ef6
# apt install sqlite3<\/span>
# apt-get install texlive-latex-extra –no-install-recommends<\/span>
# apt-get install libopenvas8-dev<\/span> <\/p>\n

5. \u9032\u884c\u66f4\u65b0
# \/usr\/sbin\/openvas-nvt-sync<\/span>
# \/usr\/sbin\/openvas-scapdata-sync<\/span>
# \/usr\/sbin\/openvas-certdata-sync<\/span> <\/p>\n

6. \u555f\u52d5\u670d\u52d9
# service openvas-scanner restart<\/span>
# service openvas-manager restart<\/span>
\u4fee\u6539 \/etc\/init.d\/openvas-gsa<\/span>
# vim \/etc\/init.d\/openvas-gsa<\/span>
\u628a
DAEMON_ARGS=”<\/span>
\u4fee\u6539\u6210
DAEMON_ARGS= –listen “OpenVAS’IP”<\/span>
# service openvas-gsa restart<\/span>
# \/usr\/sbin\/openvasmd –rebuild –progress<\/span> <\/p>\n

7. \u958b\u555f\u9632\u706b\u7246
# ufw allow https<\/span> <\/p>\n

8. \u8a2d\u5b9a\u7ba1\u7406\u5bc6\u78bc
# \/usr\/sbin\/openvasmd –user=admin –new-password=<new-password><\/span><\/p>\n

9. \u5efa\u7acb\u6191\u8b49
# \/usr\/bin\/openvas-mkcert-client<\/span>
This script will now ask you the relevant information to create the SSL client certificates for OpenVAS.<\/span><\/p>\n

Client certificates life time in days [365]: 3650<\/span>
Your country (two letter code) [DE]: TW<\/span>
Your state or province name [none]: Yilan<\/span>
Your location (e.g. town) [Berlin]: TouCheng<\/span>
Your organization [none]: Elementary School<\/span>
Your organizational unit [none]:<\/span>
**********<\/span>
We are going to ask you some question for each client certificate.<\/span><\/p>\n

If some question has a default answer, you can force an empty answer by entering a single dot ‘.’<\/span><\/p>\n

*********<\/span>
Client certificates life time in days [3650]:<\/span>
Country (two letter code) [TW]:<\/span>
State or province name [Yilan]:<\/span>
Location (e.g. town) [TouCheng]:<\/span>
Organization [Elementary School]:<\/span>
Organization unit []:<\/span>
e-Mail []: t850008@gmail.com<\/span>
Generating RSA private key, 4096 bit long modulus<\/span>
…………….++<\/span>
……….++<\/span>
e is 65537 (0x10001)<\/span>
You are about to be asked to enter information that will be incorporated<\/span>
into your certificate request.<\/span>
What you are about to enter is what is called a Distinguished Name or a DN.<\/span>
There are quite a few fields but you can leave some blank<\/span>
For some fields there will be a default value,<\/span>
If you enter ‘.’, the field will be left blank.<\/span>
—–<\/span>
Country Name (2 letter code) [DE]:State or Province Name (full name) [Some-State]:Locality Name (eg, city) []:Organization Name (eg, company) [Internet Widgits Pty Ltd]:Organizational Unit Name (eg, section) []:Common Name (eg, your name or your server’s hostname) []:Email Address []:Using configuration from \/tmp\/openvas-mkcert-client.18290\/stdC.cnf<\/span>
Check that the request matches the signature<\/span>
Signature ok<\/span>
The Subject’s Distinguished Name is as follows<\/span>
countryName\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :PRINTABLE:’TW’<\/span>
stateOrProvinceName\u00a0\u00a0 :ASN.1 12:’Yilan’<\/span>
localityName\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :ASN.1 12:’TouCheng’<\/span>
organizationName\u00a0\u00a0\u00a0\u00a0\u00a0 :ASN.1 12:’Elementary School’<\/span>
commonName\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :ASN.1 12:’om’<\/span>
emailAddress\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 :IA5STRING:’xxxx@gmail.com’<\/span>
Certificate is to be certified until Mar 11 15:06:51 2027 GMT (3650 days)<\/span><\/p>\n

Write out database with 1 new entries<\/span>
Data Base Updated<\/span>
Your client certificates are in \/tmp\/openvas-mkcert-client.18290<\/span> .<\/span><\/p>\n

You will have to copy them by hand.<\/span><\/p>\n

# cp \/tmp\/openvas-mkcert-client.18290\/key_om.pem \/var\/lib\/openvas\/private\/CA\/clientkey.pem<\/span>
# cp \/tmp\/openvas-mkcert-client.18290\/cert_om.pem \/var\/lib\/openvas\/CA\/clientcert.pem<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u53c3\u8003\u7db2\u9801\uff1a openvas 8 vulnerability scanner : Mohammad Razavi … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008\u5728 Ubuntu 16.04 \u4e0a\u5b89\u88dd OpenVAS\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[193,119],"tags":[],"class_list":["post-19499","post","type-post","status-publish","format-standard","hentry","category-c-105012","category-c-78464"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["685805"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19499"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19499"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19499\/revisions"}],"predecessor-version":[{"id":21016,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19499\/revisions\/21016"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19499"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19499"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19499"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}