Run vulnerability scans against websites hosted by the organization, externally facing servers run by the organization, and key intranet servers. Materials Needed A Kali VM, bootable USB, or installed system with OWASP ZAP or OpenVAS installed, updated, and running Considerations Be very careful about which automated scans you run to ensure that no aggressive or potentially damaging tests are included. OpenVAS saves its scan records in /var/lib/openvas/mgr/tasks.db - this file will contain sensitive data, ensure it is stored securely. OpenVAS and other vulnerability scanners can be highly aggressive in their tactics. Tools like Metasploit come with a library of active, functional exploits to "prove" that a system is actively vulnerable. As such, these can be tricky to use. Even OpenVAS on a safe-only scan can appear to a host as an active attack, blocking further access from your IP (this can cause some annoyance if you are, for example, scanning your host organization's website from their network). Some of these scans and techniques -- again, even the "safe" ones -- can also be a violation of local hacking laws. Get explicit permission, give warnings, and be careful. Walkthrough Setting up OpenVAS in Kali openvas initial setup openvas feed update openvas check setup openvas stop openvas start Visit https://127.0.0.1:9392/ in a web browser and log in. Using OpenVAS Once logged in to OpenVAS, the interface is disturbingly simple to use. For most use, using the Wizard to scan the target server works best. Things to verify before doing so: Page 94 of 240