一、openvas介绍
OpenVAS （Open Vulnerability Assessment System）是开放式漏洞评估系统，其核心部件是一个服务器，包括一套望楼漏洞测试程序，可以检测远程系统和应用程序中的安全问题。
官网：http://www.openvas.org/
注意：OpenVAS Server仅支持Linux系统。OpenVAS Client 没有特殊的要求
二、安装
1.配置网络
[[email protected] ~]#vi /etc/sysconfig/network-scripts/ifcfg-eth0
ONBOOT=yes
[[email protected] ~]#/etc/init.d/network restart
2.禁用selinux，重启生效
[[email protected] ~]#vi /etc/selinux/config
SELINUX=disabled
[[email protected] ~]#reboot
因为是虚拟机，所以把防火墙关掉了
[[email protected] ~]#/etc/init.d/iptables stop
3.安装wget
[[email protected] ~]#yum -y install wget
4.配置yum源
[[email protected] ~]#wget -q -O - http://www.atomicorp.com/installers/atomic |sh
5.安装openvas
[[email protected] ~]#yum -y install openvas
6.更新openvas数据库，设置用户名密码，我用了80分钟左右 = =！
[[email protected] ~]#openvas-setup
7.同步，已经更新到最新，可以不执行
[[email protected] ~]#openvas-nvt-sync
8.下载检查脚本，赋予权限并执行
[[email protected] ~]#wget https://svn.wald.intevation.org/svn/openvas/trunk/tools/openvas-check-setup --no-check-certificate
[[email protected] ~]#chmod 755 openvas-check-setup
[[email protected] ~]#./openvas-check-setup --server
9.启动apache
[[email protected] ~]#/etc/init.d/httpd start
10.检查模块进程是否正常
[[email protected] src]# service gsad status
gsad (pid 32552) is running...
[[email protected] src]# service openvas-manager status
openvas-manager (pid 32534) is running...
[[email protected] src]# /etc/init.d/openvas-scanner status
openvassd (pid 32404) is running...
11.web登录
https://127.0.0.1:9392