Thursday, May 9, 2013

Openvas installation on linux

OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.

Here I am going to explain how to install openvas using source complied method on debian lenny flavour,
For that edit the source.list file the /etc/apt folder and add the following line.

deb http://archive.debian.org/debian/ lenny contrib main non-free 

apt-get update
Install the dependencies ..
apt-get install bison flex
tar -zxvf cmake.tar.gz
./configure
make && make install
apt-get install libglib2.0-0  libglib2.0-dev



We will be building and configuring the parts in this order:
wmi
libraries
scanner
administrator
manager
gsd
greenbone security assistant

Install wmi client,
Now download the following package ..
tar xjvf wmi-1.3.14.tar.bz2
apt-get install bzip2
bunzip2 wmi-1.3.14.tar.bz2
tar -xvf wmi-1.3.14.tar
cd wmi-1.3.14

Download a patch for the wmi by issuing the below command , and apply the patch
patch -p1 < openvas-wmi-1.3.14.patch

apt-get install autoconf

Now enter in to the following directory ..
cd Samba/source/
./autogen.sh
./configure
make proto all
make libraries
bash install-libwmiclient.sh

Install libmicrohttpd,
wget http://mirror2.mirror.garr.it/mirrors/gnuftp/gnu/libmicrohttpd/libmicrohttpd-0.9.9.tar.gz
./configure
make
make install
Download the openvas libraries,
wget http://wald.intevation.org/frs/download.php/1053/openvas-libraries-4.0.6.tar.gz
tar -zxvf openvas-libraries-4.0.6.tar.gz
cd openvas-libraries-4.0.6
cmake .
make && make install

apt-get install libpcap-dev
apt-get install libgnutls-dev
apt-get install libgpgme11-dev
apt-get install uuid-dev
apt-get install doxygen
Download the openvas scanner,
wget http://wald.intevation.org/frs/download.php/983/openvas-scanner-3.2.5.tar.gz
tar -zxvf openvas-scanner-3.2.5.tar.gz
cd openvas-scanner-3.2.5
cmake .
make && make install

Create openvas certificates,
openvas-mkcert

apt-get install libsqlite3-dev

Download the openvas manager,
wget http://wald.intevation.org/frs/download.php/1137/openvas-manager-2.0.5.tar.gz
tar -zxvf openvas-manager-2.0.5.tar.gz
cd openvas-manager-2.0.5
cmake .
make && make install
Generate client certificates,
openvas-mkcert-client -n om -i
Create openvas user,
openvas-adduser
default accept
ctrl D
Now start openvas scanner by issuing the below command,
openvassd

Sync NVT Feeds,
open-nvt-sync  (update will latest plugins.. )
ldconfig

After updating rebuild openvas manager by issuing the below command,

openvasmd –rebuild

Download openvas-adminstrator,

wget http://wald.intevation.org/frs/download.php/987/openvas-administrator-1.1.2.tar.gz
tar -zxvf openvas-adminstrator-1.1.2.tar.gz
cd openvas-administrator-1.1.2
cmake .
make && make install
Start openvas administrator,
openvasad
apt-get install libmicrohttpd-dev
apt-get install libxml2-dev libxslt1-dev qt4-dev-tools

Download Greenbone Security Desktop,
wget http://wald.intevation.org/frs/download.php/1084/gsd-1.2.2.tar.gz
tar -zxvf gsd-1.2.2.tar.gz
cd gsd-1.2.2
cmake .
make && make install
tar -zxvf libxml2-sources-2.7.8.tar.gz
cd libxml2-sources-2.7.8
./configure && make && make install

tar -zxvf libxslt-1.1.26.tar.gz
./configure && make && make install

ldconfig

Now Download Greenbone Security Assistant,

wget http://wald.intevation.org/frs/download.php/1157/greenbone-security-assistant-2.0.2.tar.gz
tar -zxvf greenbone-security-assistant-2.0.2.tar.gz
cd greenbone-security-assistant-2.0.2
./configure
make
make install
./openvas-check-setup.sh

Start Greenbone Security Assistant daemon by issuing the below command,
gsad
if show error then
gsad -p 443 –verbose –http-only

Now openvas will be listening on different ports and the web interface will be listening on 443.

Point Your browser to https://localhost.

Thanks for reading,

Cheer /-

No comments:

Post a Comment