Re: [Openvas-discuss] use openvas to scan web applications that requires authentication

2018-09-17 Thread Christian Fischer
Hi,

On 14.09.2018 13:44, Dan Bar-Or wrote:
> but I could not find a way to define that these are for a web
> application. Is there a  way to scan a web application that requires
> basic authentication with OpenVas?

have a look at the following settings / script preferences:

HTTP account :
HTTP password (sent in clear) :

of the following NVT:

Name: Login configurations
OID: 1.3.6.1.4.1.25623.1.0.10870
Family: Settings

within your scan config where you can configure a basic authentication
which will be used by the scanner.

Note: You need to clone e.g. the "Full and Fast" scan config to be able
to change this setting.

Regards,

On 14.09.2018 13:44, Dan Bar-Or wrote:
> Hello,
> 
> I am new to OpenVas. I installed it in order to run penetration tests our
> web application. I created a task with a target web application. I created
> credentials but I could not find a way to define that these are for a web
> application. Is there a  way to scan a web application that requires basic
> authentication with OpenVas?
> 
> Thanks,
>   Dan

-- 

Christian Fischer | PGP Key: 0x54F3CE5B76C597AD
Greenbone Networks GmbH | https://www.greenbone.net
Neumarkt 12, 49074 Osnabrück, Germany | AG Osnabrück, HR B 202460
Geschäftsführer: Lukas Grunwald, Dr. Jan-Oliver Wagner
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

[Openvas-discuss] use openvas to scan web applications that requires authentication

2018-09-14 Thread Dan Bar-Or
Hello,

I am new to OpenVas. I installed it in order to run penetration tests our
web application. I created a task with a target web application. I created
credentials but I could not find a way to define that these are for a web
application. Is there a  way to scan a web application that requires basic
authentication with OpenVas?

Thanks,
  Dan
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss