I-OpenVAS, faka lesi sithwebuli sokuba sengozini ku-Ubuntu 16.04

Esihlokweni esilandelayo sizobheka i-OpenVAS. Le yinguqulo yomthombo ovulekile weNessus, eyayingezinye zezikena zokuqala zokuba sengozini. Noma I-Nmap indala futhi ingasetshenziswa ukuskena izimbobo zokuphepha. I-OpenVAS ithathwa njengabanye ukuthi ibe yiyo esinye sezikena zokuphepha ezihamba phambili umthombo ovulekile.

I-OpenVAS uhlaka lwezinsizakalo namathuluzi ahlinzeka nge- isixazululo esibanzi nesinamandla sokuthwebula nokubeka engcupheni ukuphathwa. Uhlaka luyingxenye yesixazululo sokuphathwa kobungozi kwezentengiselwano seGreenbone Networks, lapho intuthuko yenzelwe umphakathi ovulekile kusukela ngo-2009.

Ukufakwa kwe-OpenVAS ku-Ubuntu 16.04

Okokuqala, sizoba nakho engeza okugcina okulandelayo. Ukwenza lokhu sivula i-terminal (Ctrl + Alt + T) bese sibhala:

sudo add-apt-repository ppa:mrzavi/openvas

Bese ugijima:

sudo apt-get update

Manje sizoqhubeka nokufaka i-openvas9:

sudo apt-get install openvas9

Ngemuva kwalokho kuzovela okusha isikrini sokumiswa. Lokhu kuzosinika okukhethwa kukho YEBO noma Cha, mane ukhethe u-yebo bese siyaqhubeka.

Ngemuva kokufaka i-Openvas9, kuzofanele senze imiyalo elandelayo:

sudo apt-get install sqlite3 && sudo greenbone-nvt-sync && sudo greenbone-scapdata-sync && sudo greenbone-certdata-sync

Lesi sinyathelo singathatha ihora noma ngaphezulu. Uma usuqedile, sizoqala kabusha izinsizakalo futhi sakhe kabusha i-database yokuba sengozini ngokusebenzisa:

service openvas-scanner restart

service openvas-manager restart

sudo openvasmd --rebuild --progress

sudo apt-get install texlive-latex-extra --no-install-recommends

Isinyathelo sokugcina sokuqeda inqubo yokufaka kuzoba ukwenza:

sudo apt-get install libopenvas9-dev

Ngemuva kokufakwa, singakwazi vula i-URL kusiphequluli sethu https://localhost:4000. Lokhu kuzosiyisa esikrinini esifana nokulandelayo:

KUBALULEKILE: Uma ubona iphutha le-SSL lapho uvula ikhasi, engeza okuhlukile kwezokuphepha bese uqhubeka.

Ukubeka izinhloso nemisebenzi yethu

I-OpenVAS ingasetshenziswa kokubili kusuka kulayini womyalo nangeziphequluli zethu. Kulesi sihloko sizobona ukusetshenziswa okuyisisekelo kwenguqulo yayo yewebhu, enembile ngokuphelele.

Ngemuva kokungena ngemvume, chofoza UKUQALA bese ungena AMATHEKethi:

Setha i-TARGET

Uma usu-'TARGETS ', uzobona isithonjana esincane senkanyezi emhlophe ngaphakathi kwesikwele esiluhlaza okwesibhakabhaka. Sizocofa kuso ukwengeza umgomo wethu wokuqala.

Kuzovuleka iwindi, lapho sizobona khona izinkambu ezilandelayo:

• Igama: bhala ifayela le- igama lelitshe.
• Amazwana: akukho ukuphawula.
• Ibhukwana Lokubamba / Kusuka kufayela: ungakwazi lungiselela ikheli le-IP o layisha ifayela elinabaphathi abahlukahlukene. Ungabhala futhi i- igama lesizinda esikhundleni se-IP, njengoba besho ku- iwebhusayithi yabo.
• Khipha ababungazi: uma esinyathelweni esedlule uchaze ibanga le-IP lapha, unga khipha abasingathi.
• Buyisa Ukubheka: Ngicabanga ukuthi lezi zinketho ziyatholakala izizinda ezixhunywe kukheli le-IP, uma ufuna ikheli le-IP esikhundleni segama lesizinda.
• Uhlu lwePort: lapha singakhetha imaphi amachweba esifuna ukuskena. Kungakuhle ukuthi ushiye wonke amachweba we-TCP ne-UDP uma unesikhathi.
• Ukuhlolwa okuphilayo: Shiya njengokuzenzakalelayo, kepha uma ilitshe lakho lingabuyisi i-ping (njengamaseva we-Amazon, ngokwesibonelo), ungadinga ukukhetha «cabanga ukuthi uyaphila".
• Ubufakazi bokuhlolwa okuqinisekisiwe: ungangeza imininingwane yakho yohlelo ku vumela i-Openvas ukuthi ihlole ubungozi bendawo.

Kufanele ufake ikheli le-IP noma igama lesizinda, uhla lwamachweba ofuna ukuskena kanye nemininingwane yohlelo lwakho, kuphela uma ufuna hlola ukuba sengozini kwasendaweni.

Setha UMSEBENZI

Ukuqhubeka, kwimenyu enkulu (ibha yemenyu efanayo lapho sithola khona UKULUNGISELEKA) uzothola «ISKena«. Chofoza bese ukhetha "IMISEBENZI" kusuka kumenyu engezansi.

Esikrinini esilandelayo uzobona futhi inkanyezi emhlophe ngaphakathi kwesikwele esiluhlaza okwesibhakabhaka engxenyeni engenhla kwesokunxele kwesikrini, njengalapho sidala inhloso. Ewindini eliboniswayo sizobona izinketho ezilandelayo:

• Skena Okukhonjiwe: lapha sizokhetha inhloso sifuna ukuskena.
• Izaziso: thumela isaziso ngaphansi kwezimo ezithile.
• zohlelo: ilusizo ekuguquleni i- bika isimilo ngu-Openvas. Ngalo msebenzi, ungagwema okuhle okungamanga.
• I-MIn QoD: lokhu kusho ukuthi "Ikhwalithi encane yokuthola" futhi ngale nketho ungacela i-OpenVAS ukuthi khombisa kuphela izinsongo zangempela ezingaba khona.
• Susa ngokuzenzakalela: le nketho iyasivumela bhala ngaphezulu imibiko yangaphambilini. Singakhetha ukuthi mangaki imibiko esifuna ukuyigcina ngomsebenzi ngamunye.
• Skena Ukucushwa: le nketho ingeka khetha ubukhulu beskena. Ukuhlola okujulile kungathatha izinsuku.
• Isixhumi esibonakalayo somthombo wenethiwekhi: lapha ungakwazi ucacise idivayisi yenethiwekhi. Angikwenzelanga le ndatshana.
• I-oda labasingathi abakhokhelwe- Thinta le nketho uma ukhethe uhla lwe-IP noma izinhloso eziningi futhi une izinto eziseqhulwini maqondana nokulandelana lapho izinhloso ziskenwa khona.
• Ubuningi benziwa ngesikhathi esisodwa i-NVT ngesikhungo ngasinye: Lapha ungachaza ifayela le- ubungozi obukhulu buhloliwe ngenhloso ngayinye ngasikhathi sinye.
• Ubuningi babasingathi abaskeniwe ngesikhathi esisodwa- Uma unezinhloso nemisebenzi ehlukile, ungaqalisa ukuskena ngasikhathi sinye. Lapha ungachaza ifayela le- ukukhishwa okuphelele ngesikhathi esisodwa.

Iskena ilitshe

Ngemuva kwazo zonke lezi zinyathelo ezingenhla, ukuze qala ukuskena sidinga ukucindezela inkinobho yokudlala emhlophe ngaphakathi kwesikwele esiluhlaza, ezansi kwekhasi.

Ngiyethemba lesi sethulo esiyisisekelo se-OpenVAS sikusiza ukuthi uqalise ngalesi sixazululo esinamandla sokuskena ukuphepha.