Skip to content

OpenVAS Integration

xer0dayz edited this page Sep 20, 2020 · 4 revisions

First, verify that OpenVAS is running and configured properly by running openvas-start. If no errors are displayed, ensure that you can login to the web UI at https://127.0.0.1:9390. If there are any errors displayed, Sn1per may not be able to communicate with OpenVAS properly. Run openvas-check-setup to check your setup again.

NOTE: This integration requires Greenbone Security Assistant v7.0 or less to work properly.

To integrate OpenVAS vulnerability scans into Sn1per, edit your /root/.sniper.conf file and enter the appropriate values for the following:

# OPENVAS CONFIG
OPENVAS="1"
OPENVAS_USERNAME="admin"
OPENVAS_PASSWORD=""
OPENVAS_HOST="127.0.0.1"
OPENVAS_PORT="9390"

After the settings have been updated to match your environment, you can initiate an OpenVAS scan automatically by running sniper -t 127.0.0.1 -m vulnscan for single host scans or sniper -f /path/to/file.txt -m massvulnscan to automatically scan multiple hosts.

Example Usage:

sniper -t 127.0.0.1 -m vulnscan