[Openvas-discuss] Trouble connecting to scanner

2014-06-20 Thread Abelardo Ricart
I'm part of an effort to package OpenVAS for Arch Linux, but we can't seem to get it working. Here's the relevant output of openvas-check-setup: ERROR: The number of NVTs in the OpenVAS Manager database is too lowFIX: Make sure OpenVAS Scanner is running with an up-to-date NVT collection and run

Re: [Openvas-discuss] Trouble connecting to scanner

2014-06-20 Thread Hani Benhabiles
On 2014-06-20 10:32, Abelardo Ricart wrote: I'm part of an effort to package OpenVAS for Arch Linux, but we can't seem to get it working. Which version ? Here's the relevant output of openvas-check-setup: ERROR: The number of NVTs in the OpenVAS Manager database is too lowFIX: Make sure

Re: [Openvas-discuss] OpenVAS-7 - CentOS 6.5 64-bit - Installation Issue::

2014-06-20 Thread William Scott Lockwood III
The OpenVAS virtual demo appliance also works out of the box. Personally, I prefer it to BT/Kali. On Jun 20, 2014 12:43 AM, C. L. Martinez carlopm...@gmail.com wrote: Hi Samuel, The only distro that I have tested and OpenVAS works out-of-box without any problem is Kali Linux. I think it is

[Openvas-discuss] report filtering

2014-06-20 Thread Jack Harvey
I am having an alert to email the report NOT as an attachment, but as the body of the email. I need to limit the # of lines that this report so I created a filter of type Report which contains this... rows=500 first=1 sort=name The email-body contained 600+ lines. I have searched thru the

[Openvas-discuss] OpenVAS Metasploit

2014-06-20 Thread William Scott Lockwood III
Has anyone automated VAS and Sploit? At work, I have a commercial implementation of Sploit, and I'd like to be able to configure it to tell VAS to scan and return results to it in much the same way it does with Nexspose. Anyone done this? -- W. Scott Lockwood III

Re: [Openvas-discuss] OpenVAS 6 Package Install

2014-06-20 Thread Hans
Am Freitag, 20. Juni 2014, 00:33:06 schrieb Helmut Koers: Dear all, I am trying to install OpenVAS 6 on Debian 7 via OBS, but am running into the following issue: # apt-get -y install greenbone-security-assistant

Re: [Openvas-discuss] OpenVAS 6 Package Install

2014-06-20 Thread Jan-Oliver Wagner
On Freitag, 20. Juni 2014, Helmut Koers wrote: Dear all, I am trying to install OpenVAS 6 on Debian 7 via OBS, but am running into the following issue: sorry for asking this: but have you ensured to run apt-get update after you extended the sources.list? -- Dr. Jan-Oliver Wagner |

Re: [Openvas-discuss] report filtering

2014-06-20 Thread Jan-Oliver Wagner
On Freitag, 20. Juni 2014, Jack Harvey wrote: I am having an alert to email the report NOT as an attachment, but as the body of the email. I need to limit the # of lines that this report so I created a filter of type Report which contains this... rows=500 first=1 sort=name The email-body

Re: [Openvas-discuss] OpenVAS Metasploit

2014-06-20 Thread Jan-Oliver Wagner
On Freitag, 20. Juni 2014, William Scott Lockwood III wrote: Has anyone automated VAS and Sploit? At work, I have a commercial implementation of Sploit, and I'd like to be able to configure it to tell VAS to scan and return results to it in much the same way it does with Nexspose. Anyone done

Re: [Openvas-discuss] Debian 7.5 - OpenVAS :: Setup Error

2014-06-20 Thread Jan-Oliver Wagner
On Donnerstag, 19. Juni 2014, Samuel Raj wrote: openvas-scapdata-sync openvas-certdata-sync gives many errors and the openvas-manager is refusing to start. Pl. help. which OpenVAS version / origin are you working with? Have you tried the check setup script? -- Dr. Jan-Oliver Wagner |

Re: [Openvas-discuss] OpenVAS Metasploit

2014-06-20 Thread W Scott Lockwood III
On Fri, 2014-06-20 at 17:11 +0200, Jan-Oliver Wagner wrote: I have seen this to work, demonstrated by Kost. Search for OpenVAS bridge Metasploit. Not sure about the current state of this bridge though. Danke! -- William Scott Lockwood III GWB2009033817 AMC Technology GWB BoD

Re: [Openvas-discuss] OpenVAS Metasploit

2014-06-20 Thread Mauro Risonho de Paula Assumpção
FYI https://github.com/kost/metasploit-openvas-bridge But outdated :( @firebitsbr Em 20/06/2014 12:38, W Scott Lockwood III sc...@guppylog.com escreveu: On Fri, 2014-06-20 at 17:11 +0200, Jan-Oliver Wagner wrote: I have seen this to work, demonstrated by Kost. Search for OpenVAS bridge

Re: [Openvas-discuss] Trouble connecting to scanner

2014-06-20 Thread Abelardo Ricart
On Fri, 2014-06-20 at 11:53 +0100, Hani Benhabiles wrote: Which version ? Version 7 (the latest stable sources) I've issued the following command you suggested: gnutls-cli -d 14 --x509cafile /var/lib/openvas/CA/cacert.pem --x509certfile /var/lib/openvas/CA/clientcert.pem --x509keyfile

Re: [Openvas-discuss] Trouble connecting to scanner

2014-06-20 Thread W Scott Lockwood III
On Sat, 2014-06-21 at 01:59 +0900, Abelardo Ricart wrote: On Fri, 2014-06-20 at 11:53 +0100, Hani Benhabiles wrote: Which version ? Version 7 (the latest stable sources) I've issued the following command you suggested: gnutls-cli -d 14 --x509cafile

Re: [Openvas-discuss] report filtering

2014-06-20 Thread Jack Harvey
The below info is very helpful. Where would I look to learn the nuances of the filter statements, etc.? Also, if I have the alert to include the report (contained within the body of the email) the task name is listed. If I have the report sent as an attached file, the task name is not listed.

[Openvas-discuss] How to get openvas binary for Scientific Linux release 6.5 (Carbon)?

2014-06-20 Thread Sutapa Maity
Hi, I am trying to install openvas binary on Scientific Linux. It is not finding package. I did the following. Where can I get openvas binary? Please let me know. sudo wget -q -O - http://www.atomicorp.com/installers/atomic |sh ln: `/etc/system-release' and `/etc/redhat-release' are the

Re: [Openvas-discuss] OpenVAS Metasploit

2014-06-20 Thread Brandon Perry
There is an openvas plugin. In msfconsole, type 'load openvas' and it will enable the openvas specific commands. https://github.com/rapid7/metasploit-framework/blob/master/plugins/openvas.rb On Fri, Jun 20, 2014 at 1:26 PM, W Scott Lockwood III sc...@guppylog.com wrote: Aaaah, thanks. On

Re: [Openvas-discuss] OpenVAS Metasploit

2014-06-20 Thread W Scott Lockwood III
Awesome! Is that included in the commercial version as well? On Fri, 2014-06-20 at 14:25 -0500, Brandon Perry wrote: There is an openvas plugin. In msfconsole, type 'load openvas' and it will enable the openvas specific commands.

Re: [Openvas-discuss] OpenVAS Metasploit

2014-06-20 Thread Brandon Perry
Absolutely, but it is not exposed in the fancy web UI. You must use the console. On Fri, Jun 20, 2014 at 2:29 PM, W Scott Lockwood III sc...@guppylog.com wrote: Awesome! Is that included in the commercial version as well? On Fri, 2014-06-20 at 14:25 -0500, Brandon Perry wrote: There is an

Re: [Openvas-discuss] Trouble connecting to scanner

2014-06-20 Thread Abelardo Ricart
On Fri, 2014-06-20 at 12:48 -0500, W Scott Lockwood III wrote: Are those paths correct? On my install, they're in /usr/local/var/lib/openvas/CA rather than /var/lib/openvas/CA/. It may be necessary to copy clientcert.pem and clientkey.pem to the correct location. Those paths are indeed