OpenVAS / GVM
Free vulnerability scanner, the open alternative to Nessus.
Greenbone's free vulnerability scanner (the suite is now called GVM). It plays the same role as Nessus, with an open, community-updated check base, and is driven from its web interface on port 9392. Its historical weak point is the install and the initial *feed* sync, which is slow; in exchange no licence limits the number of targets.
Family Vulnerabilities & exploits
Flags gvm-setup / gvm-start (interfaz en 9392)
Concepts From version to exploit
Cheatsheet Discovery & scanning
Installation
# OpenVAS / Greenbone Vulnerability Management (GVM) en Kali
sudo apt install -y gvm
# 1) Initial setup (creates DB and downloads feeds; takes a while):
sudo gvm-setup
# 2) Note the 'admin' password it prints when it finishes
# 3) Verify the installation:
sudo gvm-check-setup
# 4) Start it and open the web console:
sudo gvm-start # https://localhost:9392Useful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.