Downloaded 346 times
More Related Content
Similar to OpenVAS: Vulnerability Assessment Scanner
OpenVAS: Vulnerability Assessment Scanner
- 1.
- 2. Learning Objective • Understandthe importance ofVulnerability Assessment (VA). • Explain how OpenVAS is used forVA. • Understand the logical architecture of OpenVAS framework. • ConductVA using OpenVAS. • Evaluate the purpose and value of OpenVAS report. • Determine how to mitigate vulnerabilities. OpenVAS_Group4_Chandrak-Melbin 2
- 3. VulnerabilityAssessment (VA) • WhatisVulnerability Assessment (VA)? • Why we needVulnerability Assessment (VA)? • RISK = ASSET *THREAT * VULNERABILITY OpenVAS_Group4_Chandrak-Melbin 3
- 4.
- 5. OpenVAS Benefits • Open Sourceand uses NessusV2 as its plugin engine. • Compatible with different Operating System. • Keeps a history of past scans. Limitations • False negatives may be reported. • Determine/find less vulnerabilities as compared is Nexpose or Nessus. • Requires 2-3 services to perform vulnerability assessment. OpenVAS_Group4_Chandrak-Melbin 5
- 6. An overview ofOpenVAS The OpenVulnerabilityAssessment Scanner known more commonly as OpenVAS, is a suite of tools that work together to run tests against client computers using a database of known exploits and weaknesses.The goal is to learn about how well your servers are guarded against known attack vectors OpenVAS is be used as VULNERALABILITYASSESSMENT tool and but also can be used as PENETRATIONTESTING tool. OpenVAS_Group4_Chandrak-Melbin 6
- 7.
- 8. Clients Components • OpenVASCLI: is a set of tools that allow administration of OpenVAS through the shell. • Greenbone Security Assistant: is a web-based tool with an intuitive interface for variousVA that you are making. • Greenbone Desktop Security: is the tool that allows us to manage everything through the GUI interface on the desktop. OpenVAS_Group4_Chandrak-Melbin 8
- 9. Services Components • OpenVASScanner: is the component that allows us the scan of hostname/ip, port range “from-to” or entire networks such as “192.168.1.0/28”. • OpenVAS Manager: is the heart of OpenVAS, the manager receives task/information from the OpenVAS Administrator and the various administration tools CLI/WEB/GUI, then use the OpenVAS Scanner that will perform theVulnerability Assessment. Also includes component that processes the results of the scans, so it also generates the final report. • OpenVAS Administrator: is the component through which users can manage and the feed (i.e. the updates). OpenVAS_Group4_Chandrak-Melbin 9
- 10. Data Components • NVT’s:it is the container of feed, i.e. test cases that detect the vulnerabilities, which are currently over 20,000. • Results, config: is the database (PostgreSQL) where reports are collected and where the entire configuration of OpenVAS is stored. OpenVAS_Group4_Chandrak-Melbin 10
- 11.
- 12.
- 13. Step 1: Settingup Kali forVulnerability Scanning https://www.kali.org/penetration-testing/openvas-vulnerability-scanning/ OpenVAS_Group4_Chandrak-Melbin 13
- 14. Step 1: Startingthe OpenVAS services • Once openvas-setup completes its process, the OpenVAS manager, scanner, and GSAD services should be listening: • If you have already configured OpenVAS, you can simply start all the necessary services by running openvas-start. OpenVAS_Group4_Chandrak-Melbin 14
- 15. Step 1: Connectingto the OpenVASWeb Interface • Point your browser to https://127.0.0.1:9392, accept the self signed SSL certificate and plugin the credentials for the admin user.The admin password was generated during the setup phase. OpenVAS_Group4_Chandrak-Melbin 15
- 16.
- 17. Step 2:Tabs • Explanationof AdministrationTab - • Adding Users, Groups and Roles. • Updating NetworkVulnerabilityTests (NVTs), Security Content Automation Protocol (SCAP) and Computer Emergency ResponseTeam (CERT) Feeds. OpenVAS_Group4_Chandrak-Melbin 17
- 18.
- 19.
- 20.
- 21.
- 22. Step 2:Tabs • Explanationof Configuration tab - • Targets, Port lists and Credentials • Scan Config • Alerts and Schedules • Permissions OpenVAS_Group4_Chandrak-Melbin 22
- 23.
- 24.
- 25.
- 26.
- 27.
- 28. Step 2:Tabs • Explanationof SecInfo Management tab - • SecInfo Dashboard • NetworkVulnerability tests (NVTs) • CommonVulnerabilities and Exposures (CVEs) OpenVAS_Group4_Chandrak-Melbin 28
- 29.
- 30.
- 31. NVTs – NetworkVulnerabilitytest OpenVAS_Group4_Chandrak-Melbin 31
- 32. CVEs – CommonVulnerabilitiesand Exposure OpenVAS_Group4_Chandrak-Melbin 32
- 33. Step 2:Tabs • Explanationof Scan Management - • Tasks • Reports • Results OpenVAS_Group4_Chandrak-Melbin 33
- 34.
- 35.
- 36.
- 37.
- 38. Step 3: Scanning •Explanationfor Scanning aTarget to findVulnerabilities. •Procedures • I: NewTarget (CreatingTarget) • II: NewTask (CreatingTask) • III: Scanning OpenVAS_Group4_Chandrak-Melbin 38
- 39.
- 40.
- 41.
- 42.
- 43.
- 44.
- 45.
- 46.
- 47.
- 48.
- 49. Step 4: Exportreport ofVA conducted • Explanation on Exporting the scanned target vulnerabilities into file. • Different extension are possible to export like .pdf, .xml etc. • PDF will be used to submit to your higher management. • XML can be used to import in Metasploit for doing pen testing. • Also you can study by just clicking the vulnerability. OpenVAS_Group4_Chandrak-Melbin 49
- 50.
- 51.
- 52.
- 53. Exploitation onVulnerable System •Using NVTs, CVEs and Metasploit • Video on Denial of Service (DOS) on scanned results. OpenVAS_Group4_Chandrak-Melbin 53
- 54. Windows XP –No Firewall and Updates OpenVAS_Group4_Chandrak-Melbin 54
- 55. Windows XP -No Firewall and Updates OpenVAS_Group4_Chandrak-Melbin 55
- 56.
- 57.
- 58.
- 59.
- 60. Step 5: Mitigation •As per references provided by OpenVAS, • Patching the updates and Firewall protected. OpenVAS_Group4_Chandrak-Melbin 60
- 61. Windows XP –Firewall and Auto Updates OpenVAS_Group4_Chandrak-Melbin 61
- 62.
- 63.
- 64.