Sunday, May 23, 2010

Building latest (stable) OpenVAS

In case you're tired of building latest versions of OpenVAS when each new (stable) release comes out, there is nice script on OpenVAS trunk which can help you in building OpenVAS (once you satisfy dependencies).

It is located in trunk/tools directory on Subversion, but if you don't like to use Subversion just to grab this script, you can look up script on the web or download latest version of directly.

How to proceed with the build? Very simple! Just say something like this:
SUDOCMD="sudo" sh
Script will automatically download latest version, build it and install it to /opt/openvas-current-date (for example: /opt/openvas-2010-05-23).

There is also other options which you can pass as environment variable to the script, but you can look it up in the script source (there is some examples in the comment section). For the sake of completeness, here are few examples:
SUDOCMD="sudo" sh
OVNOCLI="yes" sh
OPENVASPATH="/opt/openvas-3" sh
OVSKIPRM="yes" sh

Have a pleasant scanning with the OpenVAS! :)

Friday, May 21, 2010

OpenVAS LiveCD/Virtual machine - version 1.0

Trying out OpenVAS can be as easy as starting a VM image or a Live-CD.

Two versions are available: OpenVAS Server providing just the scan engine framework to be used via a browser or OpenVAS Management Protocol (OMP) clients. And OpenVAS Desktop which adds a desktop to the server including the OMP clients and immediately offers a graphical user interface to OpenVAS after booting.

Please note that both, OpenVAS Server and OpenVAS Desktop, are for demonstration and are not recommended for regular production uses, particularly for more than a few hosts depending on local system resources. The OpenVAS scanner is resource intensive and may take a long time to start on slower systems, especially when run as a VM on laptops.
Login credentials are dynamically generated on firstboot of the appliance and are specified at the console.

Tested with: VirtualBox 3.x, VMWare Workstation 6.5 and XenServer 5.5.0.

For more information go to:

OpenVAS 3.1.0rc1 released

The OpenVAS developers are happy to announce the release of the first release
candidates for the upcoming 3.1.0 release of both openvas-scanner and

Changes compared to the 3.0.x version include NTLMSSP support, improved IPv6
support, support for uploading preference file into memory and for soft
pausing of scans. For more information please check the CHANGES file provided
with each module.

Source tarballs for the two modules are available at

Binary packages for the major GNU/Linux distributions by third parties are
expected in the following weeks.

Many thanks to everybody who has made this release possible.