OpenVAS 9 on CentOS 7

#禁止root ssh

>vi /etc/ssh/sshd_config

PermitRootLogin no

>systemctl restart sshd.service

======================================================================
#更新
yum -y update

======================================================================
#防火牆
http://blog.xuite.net/tolarku/blog/363801991-CentOS+7+Firewalld+防火牆說明介紹

======================================================================
#安裝OpenVAS

>vi /etc/selinux/config

SELINUX=disabled

>reboot

>yum install wget bzip2 texlive net-tools alien

>wget -q -O - http://www.atomicorp.com/installers/atomic | sh

>yum install redis openvas

>vim /etc/redis.conf
unixsocket /tmp/redis.sock
unixsocketperm 700

>systemctl enable redis
>systemctl restart redis

>openvas-setup

(下載更新 跑很久)

(設定admin帳號密碼)

#開啟防火牆
>firewall-cmd --permanent --zone=public --add-port=9392/tcp
>firewall-cmd --reload

======================================================================
#無法產生PDF檔的修正方法
>yum -y install texlive-changepage texlive-titlesec
>mkdir -p /usr/share/texlive/texmf-local/tex/latex/comment
>cd /usr/share/texlive/texmf-local/tex/latex/comment
>wget http://mirrors.ctan.org/macros/latex/contrib/comment/comment.sty
>chmod 644 comment.sty
>texhash

windows 安裝 apache

下載連結
https://www.apachelounge.com/download/

• vc_redist_x64.exe
• httpd-2.4.29-Win64-VC15.zip

1. 安裝vc_redist_x64.exe
2. 將httpd-2.4.29-Win64-VC15.zip解壓縮到 c:/Apache24 資料夾
3. c:/Apache24/bin/httpd -k install

OpenVAS 9 on ubuntu

ubuntu server 16.04安裝

======================================================================
#參考網站
https://magiclen.org/ubuntu-server-16-04/
https://hackertarget.com/openvas-9-install-ubuntu-1604/
======================================================================
#設定固定IP
sudo vi /etc/network/interfaces

auto ens160
iface ens160 inet static
address 10.0.0.1
netmask 255.255.255.0
gateway 10.0.0.254

dns-nameservers 168.95.1.1

sudo /etc/init.d/networking restart

======================================================================
#系統更新
sudo apt update
sudo apt upgrade
sudo apt dist-upgrade

======================================================================
#安裝OpenVAS9
>sudo add-apt-repository ppa:mrazavi/openvas

>sudo apt update
>sudo apt install sqlite3
>sudo apt install openvas9

#安裝產生PDF報表軟體
>sudo apt install texlive-latex-extra --no-install-recommends

>sudo apt-get install texlive-fonts-recommended

>sudo apt install libopenvas9-dev

#同步資料 (資料量很大)
>sudo greenbone-nvt-sync
>sudo greenbone-scapdata-sync
>sudo greenbone-certdata-sync

>sudo service openvas-scanner restart

>sudo ps -ef | grep openvas

>sudo netstat -na

#增加可掃smb漏洞
>sudo apt install smbclient

>sudo service openvas-manager restart
>sudo openvasmd --rebuild --progress

======================================================================
#更改網頁預設使用port
#change gsad default port 4000
>sudo vi /etc/default/openvas-gsa

HTTP_ONLY=1
LISTEN_ADDRESS="0.0.0.0"
PORT_NUMBER=9392

>sudo /etc/init.d/openvas-gsa restart

======================================================================
#開啟防火牆及相關policy
#啟用
>sudo ufw enable

#停用
>sudo ufw disable

#允許全部
>sudo ufw default allow

#封鎖全部
>sudo ufw default deny

#刪除防火牆規則
>sudo ufw status numbered
>sudo ufw delete 'numbered'

#啟用log /var/log/ufw.log
>sudo ufw logging on

#查看規則及狀態
>sudo ufw status
>sudo ufw statusverbose

#範例
>sudo ufw allow ssh

>sudo ufw allow in 8080

>sudo ufw deny out 3389

>sudo ufw deny in 123/udp

>sudo ufw version

>sudo ufw allow from 10.0.0.2

>sudo ufw deny from 10.0.1.0/24

>sudo ufw allow from 10.10.1.0/24 to any port 22

OpenVAS 9 on FreeBSD

安裝OpenVAS9
>pkg install openvas9

>ee /etc/rc.conf

redis_enable="YES"
openvassd_enable="YES"
openvassd_flags=""
openvasmd_enable="YES"
openvasmd_flags=""
gsad_enable="YES"
gsad_flags="--listen=0.0.0.0 --port=9392 --http-only"


>cp /usr/local/etc/redis.conf.example redis.conf
>ee redis.conf
unixsocket /tmp/redis.sock

>service redis start

>openvassd
>greenbone-nvt-sync
>greenbone-scapdata-sync
>greenbone-certdata-sync
>openvasmd --rebuild --progress
>openvasmd --create-user=admin --role=Admin
>openvasmd --user=admin --new-password=admin

>service openvassd restart
#這個指令會有錯誤訊息，待查
#Unknown option --listen=127.0.0.1
#解法 /etc/rc.conf加入
#openvassd_flags=""

>service openvasmd restart
#重開機會開不起來
#log
#Setting GnuPG dir to '/var/lib/openvas/openvasmd/gnupg'
#Setting GnuPG dir failed: Invalid crypto engine
#目前找尋解決方法中
#可使用/usr/local/etc/rc.d/openvasmd start手動啟動

>openvasmd --rebuild --progress

>service gsad start


>pkg install texlive-texmf
#裝了也無法產出pdf檔
#目前找尋解決方法中
**pkg install tex-formats 補上pdflatex程式