openvas二进制安装安装

OpenVAS（Open Vulnerability Assessment System），用来检测目标网络或主机安全性。其强大的评估能力来自于集成的数万个漏洞测试程序，这些测试程序以插件形式提供，可从官方网站免费更新。
OpenVAS能基于C/S（客户端/服务器），B/S（浏览器/服务器）架构进行工作，管理员可通过浏览器或专用客户端下达扫描任务，服务器负责执行扫描操作并提供扫描结果
服务层组件：
Openvas-scanner扫描器：负责调用各种漏洞测试插件，完成实际扫描操作
Openvas-manager管理器：负责分配扫描任务，并据扫描结果生成评估报告
Openvas-adminstrator管理着：负责管理配置信息，用户授权等相关工作
客户层组件：
Greenbone安全助手对应的系统服务gsad
通用安全漏洞评分系统(Common Vulnerability Scoring System)

——————/安装
[root@localhost home]# /etc/init.d/iptables status //查看防火墙状态
[root@localhost home]# /etc/init.d/iptables stop
[root@localhost home]# chkconfig --level 35 iptables off //永久关闭防火墙

[root@localhost Desktop]# vi /etc/selinux/config
INUX=disabled
[root@localhost home]# yum install wget
[root@localhost home]# wget -q -O - http://www.atomicorp.com/installers/atomic |sh
[root@localhost home]# yum upgrade
[root@localhost home]# yum install openvas -y
[root@localhost home]# openvas-setup
Step 3: Choose the GSAD admin users password.
lyl
521119
Step 4: Create a user
lm
521119
Setup complete, you can now access GSAD at:
https://<IP>:9392

——————/启动
[root@localhost home]# service openvas-administrator status
openvassd (pid 13838) is running...
[root@localhost home]# service openvas-administrator status //启动服务
openvas-administrator (pid 7645) is running...
[root@localhost home]# service openvas-manager status
openvas-manager is stopped
[root@localhost home]# service openvas-manager start
Starting openvas-manager: [ OK ]
[root@localhost home]# service gsad status
gsad (pid 7466) is running...
[root@localhost home]# netstat –apt //所监听的端口
tcp 0 0 *:9391 *:* LISTEN 13838/openvassd
tcp 0 0 *:9392 *:* LISTEN 7466/gsad
tcp 0 0 localhost:9393 *:* LISTEN 7645/openvasad

[root@localhost home]# vi /etc/sysconfig/gsad
GSA_ADDRESS=0.0.0.0 //可监听所有ip的9392端口
[root@localhost home]# service gsad restart

[root@localhost home]# openvasmd –rebuild //重建数据库
[root@localhost home]# openvassd //加载plugins并启动scanner
[root@localhost home]# service openvas-manager start

[root@localhost home]# openvas-check-setup --server
ERROR: The number of NVTs in the OpenVAS Manager database is too low.
FIX: Make sure OpenVAS Scanner is running with an up-to-date NVT collection and run 'openvasmd --rebuild'.
[root@localhost home]# openvasmd –rebuild
[root@localhost home]# openvas-check-setup --server
ERROR: OpenVAS Manager is NOT running!
[root@localhost home]# openvasmd
[root@localhost home]# openvas-check-setup --server
It seems like your OpenVAS-6 installation is OK.

——————/使更新生效
openvasmd --rebuild //重建数据库
openvassd //加载plugins并启动openvas-scaner服务

——————/访问

https://192.168.206.129:9392 //使用浏览器连接到OpenVAS系统的gsad服务