Installing And Configuring OpenVAS Video Lecture - Get to know Ethical

[Laughter]
hello Evan and welcome to this video in
this video gonna be looking at how to
install and configure open vs on Kali
Linux now before we even get started
with installing it and configuring it we
need to understand what it is how it
works and what part it will play in the
penetration testing process so let's
start off with what it is open VA s
stands for the open vulnerability
assessment system so from that you can
probably guess what it does alright so
its job is vulnerability discovery and
analysis so it's job is to discover
vulnerabilities on a target and analyze
them and from there you generate or you
come up with an idea or a plan as to
what vulnerabilities you want to target
on a specific system so you can guess
how important this is in the penetration
testing process once we perform the
information gathering with any of the
auxilary scanners or with nmap we then
need to perform a vulnerability analysis
on these on the host mode specifically
on these services that they are running
so open vs is an open source alternative
to Nice's now if you don't know what
Nice's is don't worry Nice's is
essentially a commercial vulnerability
analysis tool that also has a free
version but not as as inclusive or as
extensive as open vs and because I want
to keep this as accessible as possible
to everyone who is going to take this
course that's why I'm using open vs open
vs works perfectly and it's completely
free to set up so if you're running Kali
Linux for some reason as I've noticed
many many a times I'm running the latest
version which is the 2018 distribution
I think it's 2018 point two yeah there
we are as you can see that's the virtual
machine I'm running by most definitions
or for most people you can find you can
find open vs under vulnerability
analysis now if you don't find it under
vulnerability analysis that's what I'm
going to show you how to do right now so
let's say you have you don't have it
installed and you want to get it
installed so I'm going to
this in the in the course in the section
description or in these section
resources I'm gonna have this page right
here and as you can see setting up Cali
for vulnerability scanning so this will
show you how to get open vias installed
we then need to configure it alright so
the first thing you need to do is you
need to update your repositories and you
need to upgrade your distribution to the
latest version so you can do that using
those commands and I did I plated and
upgraded my packages and I don't need to
I don't need to upgrade my distribution
because I've already done that alright
so you can see I did that right here
the reason I'm not doing it right now is
because it took a while so I'm not doing
it then you then need to go and install
open VM and again I did not do it
because it's going to download a large
file size probably around 200 megabytes
so that's gonna take a while so to
install it you type in apt-get install
open VM and etre which is fantastic
because it will work awesome so you need
to just type in apt-get install
open-vm-tools-desktop installing and now
you need to configure it alright and
configuring it is going to be the same
on every Kali Linux distribution so as I
mentioned you should have in your
vulnerability analysis section the open
vs initialize and starts and stop
functions right here added if they are
not added you can simply just type in in
the terminal open vs but after you've
installed it you should have these three
options here we need to initialize and
configure it first so you want to click
on that so you want to initialize so
give that a few seconds a new terminal
will open up and it's going to start the
the installation and the configuration
phase now this is going to take a while
dependent on a lot of things as you can
see it still has to gather files and the
file this gathering is the database
of that it will perform these scans
against so the essentially the whole
vulnerability database dependent on the
type of vulnerabilities and the N sorted
out in terms of the date of their
release so I'm gonna wait for this to
complete and I'll get back to you when
this is done alright so once the setup
and configuration is done and it is
completed downloading all the libraries
and databases in regards to the known
vulnerabilities what its gonna do is
it's gonna start the open vs service for
you and it's going to create a user for
you and it'll give you a password now
this is very important because you will
need this password to login to the web
interface which is going to be hosted on
your local on your localhost which is
port which is the IP one twenty seven
point zero point zero point one and the
port is ninety three ninety two so
remember it is going to be hosted on
your localhost and it's going to open up
the web UI for you automatically now if
you ever were to close or stop the
service you can do that by going into
applications vulnerability analysis and
you can click on open the air stop and
that's going to stop the open V air
service if you want to start it again
you type in open V air start you don't
need to initialize or configure it again
once you've downloaded all these files
okay so as you can see it's giving you
all the information so what I'm gonna do
is I'm just gonna copy this now so copy
that the password and we know that the
user is administrator so let's open up
our browser as it's telling us that that
it opened it for us so I'm just going to
continue it's telling us there's an
unresponsive script here so it did open
up the localhost for us so we we are
getting a little message here telling us
that our connection is not secure and
that's because we need to add or confirm
this exception in terms of the security
certificate so we're gonna confirm
security exception and it's good it's
going to open up open vs for us so give
that a few seconds to load up and voila
welcome to open vs by Green Bowl
security so our username is all
going to be admin and your password will
be unique to you so make sure you save
that password and I'm just gonna paste
it in here and hit login and it's gonna
lock me in as administrator all right so
let's login and hopefully it lock this
in and gives us the web interface now of
course I'm going to be covering the web
interface as we move along and I'll be
focusing on using this interface and
using open vias for vulnerability
analysis as we move along in this
section so welcome to open vs you can
see that it is quite an expensive or an
extensive tool box so it contains an
extensive tool kit so there's a lot to
cover and we'll be covering that when we
look at scanning with with open vias or
performing vulnerability analysis so
that's going to be it for this video and
I'll be seeing you in the next video
[Music]