wKioL1QVdCmyKVlgAAmIi42w1s93章节.pptxVIP

Kali Linux Web 渗透测试—第七课 OpenVas玄魂交流qq群：303242737Openvas OpenVAS是类似Nessus的综合型漏洞扫描器，可以用来识别远程主机、Web应用存在的各种漏洞。Nessus曾经是业内开源漏洞扫描工具的标准，在Nessus商业化不再开放源代码后，在它的原始项目中分支出OpenVAS开源项目。经过多年的发展，OpenVAS已成为当前最好用的开源漏洞扫描工具，功能非常强大，甚至可以与一些商业的漏洞扫描工具媲美。OpenVAS使用NVT（Network Vulnerabilty Test，网络漏洞测试）脚本对多种远程系统（包括Windows、Linux、UNIX以及Web应用程序等）的安全问题进行检测。OpenvasOpenvas-安装最新版1. dpkg-query -l | grep openvas* 查看已经安装的组件2.删除原有文件 apt-get autoremove openvasOpenvas-安装最新版3.安装依赖项 apt-get install nsis alien rpm texlive-latex-extra libqt4-dev g++ libmicrohttpd-dev libxml2-dev libxslt1-dev libxml2-dev libsqlite3-dev doxygen sqlfairy xmltoman sqlite3 gcc pkg-config libssh-dev libgnutls-dev libglib2.0-dev libpcap-dev libgpgme11-dev uuid-dev bison libksba-dev zlib1g-dev libldap2-dev xsltprocOpenvas-安装最新版3.安装wmimkdir openvasfix# wget /download/wmi/wmi-1.3.14.tar.bz2# tar xjvf wmi-1.3.14.tar.bz2#cd xjvf wmi-1.3.14# wget /download/wmi/openvas-wmi-1.3.14.patch# wget /download/wmi/openvas-wmi-1.3.14.patch2# wget /download/wmi/openvas-wmi-1.3.14.patch3# patch -p1 openvas-wmi-1.3.14.patch# patch -p1 openvas-wmi-1.3.14.patch2# patch -p1 openvas-wmi-1.3.14.patch3#apt-get install autoconf#apt-get install cmake# cd Samba/source/# ./autogen.sh#./configure# make proto all# make libraries# bash install-libwmiclient.sh# bash install-libwincmd.shOpenvas-安装最新版4.安装openvas libraries# wget /frs/download.php/1682/openvas-libraries-7.0.3.tar.gz# tar xzvf openvas-libraries-7.0.3.tar.gz# cd cd openvas-libraries-7.0.3/# cmake .# make# make installOpenvas-安装最新版5.安装?openvas scanner# wget /frs/download.php/1686/openvas-scanner-4.0.2.tar.gz# tar xzvf openvas-scanner-4.0.2.tar.gz# cd openvas-scanner-4.0.2/# cmake .# make# make installOpenvas-安装最新版6.安装?openvas manager# wget /frs/download.php/1690/openvas-manager-5.0.3.tar.gz# tar xzvf openvas-manager-5.0.3.tar.gz# cd openvas-manager-5.0.3/# cmake .# make# make installOpenvas-安装最新版7.安装?Greenbone Security Assistant (GSA)# wget /frs/download.php/1694/greenbone-security-assistant-5.0.2.tar.gz