Scan a website with OpenVAS?

turiyain · 06-19-2012, 06:54 AM

Dear Experts,

I have a working Back Track 5 RC2 system. My OpenVAS is working fine.
I am able to scan remote host. But this is not my requirement. I have to scan a web site for vulnerability.

Kindly guide me.

Thanks in advance.

VJ++

unSpawn · 06-19-2012, 10:05 AM

Quote:

Originally Posted by turiyain

I have to scan a web site for vulnerability.

Be aware Laws may require you to obtain authorization prior to scanning remote addresses. Also be aware sustained, active probing for vulnerabilities may have an adverse effect on the site slash host. Informing the client, and in some cases the provider, may be prudent. As to your question check out which plugins OpenVAS provides and what their purpose is. Should be at least two you could use.

turiyain · 06-19-2012, 11:35 PM

Quote:

Originally Posted by unSpawn

Be aware Laws may require you to obtain authorization prior to scanning remote addresses. Also be aware sustained, active probing for vulnerabilities may have an adverse effect on the site slash host. Informing the client, and in some cases the provider, may be prudent. As to your question check out which plugins OpenVAS provides and what their purpose is. Should be at least two you could use.

Thanks for the reply. This is our official web site to be scanned for vulnerabilities. I am not getting the way, that where can i give url of the web site for scanning.

Regards

VJ++ Byte code

unSpawn · 06-20-2012, 12:39 AM

Quote:

Originally Posted by turiyain

I am not getting the way, that where can i give url of the web site for scanning.

I'm sorry but you should not give the address of the site to anyone for the reasons I stated before.

J0hnny_b14z3r · 06-20-2012, 03:07 PM

Once you have your OpenVAS server setup and your client is connected create a new task (Task > New) then create the scope (Scope > New) within that task.. Once you have your scope setup there will be multiple options on the right window, one of which is target selection. Enter your sites IP or FQDN there.. figure out which plugins you want to use and your desired options then execute the scan (Scope > Execute)... Hope that helps!

turiyain · 06-21-2012, 12:02 AM

Quote:

Originally Posted by J0hnny_b14z3r

Once you have your OpenVAS server setup and your client is connected create a new task (Task > New) then create the scope (Scope > New) within that task.. Once you have your scope setup there will be multiple options on the right window, one of which is target selection. Enter your sites IP or FQDN there.. figure out which plugins you want to use and your desired options then execute the scan (Scope > Execute)... Hope that helps!

Thanks for the answer to my question. If i want to scan a url (web site - Authenticated Access)then what will be the way.

Regards,

VJ++ Byte Code

unSpawn · 06-21-2012, 01:25 AM

Ah, so you're new to OpenVAS and looking for simple instructions. Well, it comes with documentation to read and this thread therefore isn't related to Linux Security at all.
Moving to the Newbie forum.