From 0b17b7c5382a35bc6985ff6daf7c9cebd8ed9430 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Wed, 2 Feb 2022 15:14:29 -0700 Subject: [PATCH] Created GVM 21.x Integration (markdown) --- GVM-21.x-Integration.md | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 GVM-21.x-Integration.md diff --git a/GVM-21.x-Integration.md b/GVM-21.x-Integration.md new file mode 100644 index 0000000..4595e06 --- /dev/null +++ b/GVM-21.x-Integration.md @@ -0,0 +1,24 @@ +First, verify that GVM is running and configured properly by running ```gvm-start```. If no errors are displayed, ensure that you can login to the web UI at https://127.0.0.1:9390. If there are any errors displayed, Sn1per may not be able to communicate with GVM properly. Run ```gvm-check-setup``` to check your setup again. + +**NOTE:** This integration requires GVM 21.x and a valid Sn1per Professional v10.0 or higher to work properly. + +To integrate GVM 21.x vulnerability scans into Sn1per Professional v10.0 or higher, create a copy of the default Sn1per configuration template (```cp -vf /sniper/conf/default /sniper/conf/gvm_vulnerability_scan.conf```) and enter the appropriate values for the following: + +``` +# OPENVAS CONFIG +OPENVAS="1" +OPENVAS_USERNAME="admin" +OPENVAS_PASSWORD='mypasswordhere!' +OPENVAS_HOST="127.0.0.1" +OPENVAS_PORT="9390" +OPENVAS_RUNAS_USER="kali" +``` + +NOTE: You will need to specify a local (non-root) Linux account to initiate GVM 21.x scans using Sn1per by updating the "OPENVAS_RUNAS_USER" setting in your Sn1per configuration file. + +After the settings have been updated to match your environment, you can initiate an OpenVAS scan automatically by running a "normal" or "vulnscan" mode in Sn1per Professional and specifying the new configuration template you just created (ie. /sniper/conf/gvm_vulnerability_scan.conf). This can also be done from the command line by running the following: + +Example Usage: +``` +sniper -t 127.0.0.1 -c /sniper/conf/gvm_vulnerability_scan.conf -m vulnscan -w 127.0.0.1 +``` \ No newline at end of file