OpenVAS, gadza ino inodzivirira scanner paUbuntu 16.04

Muchinyorwa chinotevera isu ticha tarisa OpenVAS. Iyi ndiyo yakavhurwa sosi vhezheni yeNessus, yaive imwe yekutanga yekukanganisa scanners. Kunyange Nmap yakura uye inogona zvakare kushandiswa kuongorora maburi ekuchengetedza. OpenVAS inoonekwa nevamwe kuve imwe yeakanakisa ekuchengetedza scanners sosi yakavhurwa.

OpenVAS furemu yemasevhisi uye maturusi anopa iyo yakazara uye ine simba mhinduro yekusagadzikana kwekutarisa uye manejimendi. Iyo sisitimu chikamu cheGreenbone Networks 'yekutengesa kushomeka manejimendi mhinduro, kubva kune izvo zviitiko zvakagadzirwa kune yakavhurika sosi nharaunda kubvira 2009.

OpenVAS kuisirwa paUbuntu 16.04

Chekutanga pane zvese, isu tichava nazvo wedzera chinotevera chinzvimbo. Kuti tiite izvi tinovhura terminal (Ctrl + Alt + T) uye nyora:

sudo add-apt-repository ppa:mrzavi/openvas

Wobva wamhanya:

sudo apt-get update

Iye zvino tichaenderera mberi nekuisa openvas9:

sudo apt-get install openvas9

Ipapo imwe nyowani ichaonekwa sikirini yekumisikidza. Izvi zvichatipa sarudzo YES kana HERE, ingo sarudza hungu uye isu tinoenderera.

Mushure mekuisa Openvas9, isu tichafanirwa kuita inotevera mirairo:

sudo apt-get install sqlite3 && sudo greenbone-nvt-sync && sudo greenbone-scapdata-sync && sudo greenbone-certdata-sync

Iyi nhanho inogona kutora awa kana kupfuura. Kana tangopedza, isu tichazotangazve masevhisi uye nekuvakazve dhatabhesi yekushomeka nekuita:

service openvas-scanner restart

service openvas-manager restart

sudo openvasmd --rebuild --progress

sudo apt-get install texlive-latex-extra --no-install-recommends

Nhanho yekupedzisira yekupedzisa maitiro ekumisikidza ichave yekumhanya:

sudo apt-get install libopenvas9-dev

Mushure mekumisikidzwa, tinogona vhura iyo URL mubrowser yedu https://localhost:4000. Izvi zvichatiendesa kuchiratidziro senge chinotevera:

ZVINOKOSHA: Kana iwe ukaona kukanganisa kweSSSL paunenge uchivhura iyo peji, wedzera iyo yekuchengetedza kunze uye enderera mberi.

Kuisa zvinangwa zvedu nemabasa

OpenVAS inogona kushandiswa zvese kubva kumutsara wekuraira uye kuburikidza nemabhurawuza edu. Muchikamu chino tichaona iko kushandiswa kweiyo vhezheni yewebhu, iri zvachose yakajeka.

Mushure mekupinda mukati, tinya KUFUNGA uyezve mukati VATARISIRI:

Gadza TARGET

Kamwe mu 'TARGETS', iwe uchaona chidiki chiratidzo cheye chena nyeredzi mukati mebhuruu square. Tichadzvanya pairi kuwedzera yedu yekutanga chinangwa.

Iwindo rinovhura, ratinozoona inotevera minda:

• zita: pano nyora iyo zita rechinangwa chako.
• komenda: hapana kutaura.
• Mauto Chinyorwa / Kubva faira: unogona gadzirisa IP kero o upload faira rine akasiyana mauto. Iwe unogona zvakare kunyora a domain name pachinzvimbo cheIP, sezvavanotaura mukati yavo webhusaiti.
• Sarudza mauto: kana padanho rapfuura iwe wakatsanangura IP renji pano, unogona kusanganisa mauto.
• Reverse Lookup: Ini ndinofungidzira kuti idzi sarudzo dzinowanikwa domains dzakabatana ne IP kero, kana iwe uchitsvaga IP kero pane zita rezita.
• Chinyorwa Chiteshi: pano tinogona kusarudza ndeapi madoko atinoda kuongorora. Zvinokurudzirwa kusiya ese TCP uye UDP zviteshi kana uine nguva.
• Alive bvunzo: siya sekutadza, asi kana chako chakanangwa chisina kudzoka ping (semaseva eAmazon, semuenzaniso), ungangoda kusarudza «funga kuva mupenyu".
• Zvitupa zvechokwadi cheki: iwe unogona kuwedzera ako masisitimu esisitimu ku bvumira Openvas kuti itarise kusagadzikana kwenzvimbo.

Iwe unofanirwa kuisa IP kero kana zita rezita, iwo maratidziro emachiteshi aunoda kuverenga, uye ako masisitimu masisitimu, chete kana iwe uchida tarisa kunetseka kwenzvimbo.

Seta TASK

Kuti uenderere mberi, mune iyo huru menyu (imwechete menyu bar kwatinowana KUSIMBISA) iwe unowana «Kuongorora«. Dzvanya uye sarudza "TASKS" kubva ku submenu.

Pachiratidziro chinotevera iwe uchaona zvakare nyeredzi chena mukati mechiedza chebhuruu munzvimbo yekumusoro kuruboshwe kwechiratidziro, senge patakagadzira chinangwa. Muhwindo rinoratidzwa tichaona zvinotevera sarudzo:

• Scan Target: pano isu tichasarudza chinangwa tinoda kuongorora.
• Alerts: tumira ziviso pasi pemamiriro ezvinhu chaiwo.
• Kupfuura: inobatsira kugadzirisa iyo rondedzera maitiro neOvervas. Kubudikidza nebasa iri, unogona kudzivirira manyepo enhema.
• MIN QoD: izvi zvinoreva "Minimum yekuonekwa mhando" uye nesarudzo iyi iwe unogona kukumbira OpenVAS kuti ratidza chete zvinogona kutyisidzira chaiko.
• autodelete: iyi sarudzo inotibvumidza nyora mishumo yapfuura. Tinogona kusarudza mangani mareport atinoda kusevha pabasa rega.
• Shandisa scan Config: iyi sarudzo ndeye Sarudza kusimba kwescan. Kutsvaga kwakadzika kunogona kutora mazuva.
• Network sosi interface: apa unogona tsanangura network network. Ini handina kuzviitira yechinyorwa ichi.
• Odha yekuvavarira inomiririra- Bata iyi sarudzo kana iwe ukasarudza IP renji kana akawanda zvinangwa uye iwe unayo zvinokosheswa maererano nehurongwa uhwo tariso dzinoongororwa.
• Maximum panguva imwe chete akaurayiwa NVT pamushandi: Pano unogona kutsanangura iyo kunetseka kwakanyanya kuongororwa kune chimwe nechimwe chinangwa panguva imwe chete.
• Maximum panguva imwe chete akaongororwa mauto- Kana iwe uine zvinangwa zvakasiyana uye mabasa, iwe unogona kumhanyisa panguva imwe chete zviyero. Pano unogona kutsanangura iyo kuuraya kukuru panguva imwe chete.

Kuongorora chinangwa

Mushure mematanho ese ari pamusoro, ku tanga kuongorora isu tinofanirwa kudzvanya chena yekutamba bhatani mukati megreen green, pazasi pepeji.

Ndinovimba ichi chirevo chekutanga kuOpenVAS chinokubatsira iwe kuti utange neichi chine simba chekuchengetedza scanning mhinduro.