DCO-SOGs/8 Tools/OpenVAS/OpenVas SOP.md

~ Cpl Potter, Nicholas

This is the SOP for setting up OpenVas

Installing OpenVas via Terminal

1. Install VMware Kali Linux from Kali's Website
2. Run commands to make sure your Kali instance is up to date before installing OpenVas (You will need an internet connection to run these properly)

   sudo apt update

    sudo apt upgrade -y

    - The -y will push a Yes to any user input prompts

	sudo apt dist-upgrade -y

     sudo apt install openvas
    ``` 

### OpenVas is now installed now we have to setup the web interface

```bash
     sudo gvm-check-setup
    ```

    (This will verify the installation) 
![alt text](check-setup.png)
 ```bash
    sudo gvm-setup 
    ```

    - If gvm-setup does not work you will need to upgrade postgresql
 ```bash
    sudo pg_lsclusters 

(If you have 2 versions shown follow the rest) 

    sudo pg_dropcluster 'enter the newest version number' main --stop

    sudo pg_upgradecluster 'enter the older versions number' main

    sudo pg_dropcluster 'enter the old version number' main

    sudo apt purge postgresql-client-15

• now try running sudo gvm-setup

Starting and stopping OpenVas

     sudo gvm-start 

(Starts the web interface)

2. open browser and navigate to Web Interface 127.0.0.1:9392
   • Will bring you to a greenbone login screen

     sudo gvm-stop

(Stops the web interface)

Creating Users

1. In your terminal

    sudo runuser -u _gvm -- gvmd --create-user=username --new-password=password

• This command will generate a hash value for the password which will be used to login to the web interface 

Changing Password to Standard

1. Navigate to Web Interface
2. Login with your created username and the hashed password generated from the terminal
   • DO NOT LOSE THE HASHED PASSWORD
3. Click on the person in the top right corner and click my settings 
4. On the My Settings page click the Pen and Paper in the top left above the Gear 
5. Enter the Hashed Password in the Old text box and your Standard Password in the New and Confirm boxes 
6. Click save and log back in using new password

Making Web Interface Accessible from Internal Network

1. Stop the web service

   sudo gvm-stop
   

2. Make sure your workstation IP is the IP you want your web interface to have. 

3. Use your preferred text editor in terminal and navigate to /usr/lib/systemd/system/greenbone-security-assistance.service 

4. Once in the text editor, go down to the ExecStart line and change the IP from loopback (127.0.0.1) to 0.0.0.0. Leave the port alone. 

5. Exit and save changes to that file then reload the daemon

   sudo systemctl daemon-reload
   

6. Start the web interface and if your workstation is in the Networks IP range you can access the Web Interface IP.

   sudo gvm-start
   

Creating Targets

1. Access the webserver for Openvas 

2. Hover over the Configuration tab and click on Targets 

3. Once on the Targets page select the Paper with the star on it in the top left to create a new target 

4. A screen will pop up. Give it a descriptive name for the target range, add comments if necessary, put the network range in x.x.x.x/xx format and select the Port Range to scan from then click save. Port ranges will be made later

   

Creating Port Lists

1. Follow Step 1-3 from creating a target (Selecting Port Lists instead of Targets on Step 2)

2. Put a descriptive name and a comment if needed. Then fill in your port range (This field will give you an example of how to define your port ranges T:xx-xx,xx,U:xx-xx,xx) Then click save