OpenVAS is an open source vulnerability scanning framework consisting of services and tools that allow for vulnerability scanning and management. It includes OpenVAS scanner which executes network vulnerability tests daily using over 530,000 plugins, and OpenVAS manager which controls scanners and the central SQL database where scan results are stored. The OpenVAS CLI allows users to create batch processes to control the OpenVAS manager.

2. What is OpenVAS?
• OpenVAS stands for ‘Open Vulnerability Assessment System’.
• OpenVAS (Open Vulnerability Assessment System) is a software
framework of several services and tools offering vulnerability
scanning and vulnerability management.
• All OpenVAS products are free software, and most components are
licensed under the GNU General Public License (GPL).
• Plugins for OpenVAS are written in the Nessus Attack Scripting
Language (NASL).

3. Vulnerability
• A vulnerability is a weakness which can be exploited by a threat actor,
such as an attacker, to perform unauthorized actions within a
computer system.
• Vulnerability Scanners are automated tools that scan web
applications, normally from the outside, to look for security .
Vulnerability Scanner

4. Cyber Attacks has 3 Possibilities

6. OpenVAS Architecture

7. • OpenVAS manager:
The Manager is the central Service that consolidates plain vulnerability
management system.
It Controls one or more scanners as well as the internal central SQL
database where all scan results and configurations are stored.
• OpenVAS Scanner:
The Scanner very effectively executes the actual network vulnerability
tests which is updated daily, it is managed by manager.
• Greenbone security assistant:
It is a learn web service which designed for security purpose to
implement fully functioned OpenVAS manager.
• OpenVAS CLI:
This contains primarily contains the command line tool ’omp’.
It allows user to create batch processes to control OpenVAS manager.

8. OpenVAS working

9. Working of OpenVAS
• The OpenVAS scanner is a comprehensive vulnerability assessment
system that can detect security issues in all manner of servers and
network devices.
• can test a system for security holes using a database of
over 5,30,000 test plugins.
1. Enter the target to scan
2. Select scan type
3. Launch the Vulnerability Scan!

10. Installation of OpenVAS
• apt update && apt install sqlite3 && apt install openvas9
• apt install texlive-latex-extra --no-install-recommends
• apt-get install texlive-fonts-recommended
• greenbone-nvt-sync
• greenbone-scapdata-sync
• greenbone-certdata-sync
• add-apt-repository ppa:mrazavi/openvas
• ps -ef | grep openvas
• apt install smbclient
• service openvas-manager restart
• openvasmd --rebuild --progress

14. Users
1. Admin (All rights, allocates roles to all user)
2. Guest
3. Info
4. Monitor (only view)
5. Observer (only view)
6. User (All the rights)

19. Request for scanning