RomanNum3ral
/
Sn1per
mirror of https://github.com/1N3/Sn1per.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Created GVM 21.x Integration (markdown)

xer0dayz 2022-02-02 15:14:29 -07:00
parent be91d1037c
commit 0b17b7c538
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
GVM-21.x-Integration.md Normal file

@ -0,0 +1,24 @@
First, verify that GVM is running and configured properly by running ```gvm-start```. If no errors are displayed, ensure that you can login to the web UI at https://127.0.0.1:9390. If there are any errors displayed, Sn1per may not be able to communicate with GVM properly. Run ```gvm-check-setup``` to check your setup again.
**NOTE:** This integration requires GVM 21.x and a valid Sn1per Professional v10.0 or higher to work properly.
To integrate GVM 21.x vulnerability scans into Sn1per Professional v10.0 or higher, create a copy of the default Sn1per configuration template (```cp -vf /sniper/conf/default /sniper/conf/gvm_vulnerability_scan.conf```) and enter the appropriate values for the following:
```
# OPENVAS CONFIG
OPENVAS="1"
OPENVAS_USERNAME="admin"
OPENVAS_PASSWORD='mypasswordhere!'
OPENVAS_HOST="127.0.0.1"
OPENVAS_PORT="9390"
OPENVAS_RUNAS_USER="kali"
```
NOTE: You will need to specify a local (non-root) Linux account to initiate GVM 21.x scans using Sn1per by updating the "OPENVAS_RUNAS_USER" setting in your Sn1per configuration file.
After the settings have been updated to match your environment, you can initiate an OpenVAS scan automatically by running a "normal" or "vulnscan" mode in Sn1per Professional and specifying the new configuration template you just created (ie. /sniper/conf/gvm_vulnerability_scan.conf). This can also be done from the command line by running the following:
Example Usage:
```
sniper -t 127.0.0.1 -c /sniper/conf/gvm_vulnerability_scan.conf -m vulnscan -w 127.0.0.1
```