How to install OpenVAS 3 in Ubuntu 9.10

Folks,
As you must be knowing that OpenVAS Community has released a new version for OpenVAS 3.x and they have come up with some many additional features this time i.e. GSA, openvas-administrator and openvas-manager. They are some of the useful features that you should give it a try! And at the same time we can also observe that this time their packages are kinda different as well. I will be telling you on how you can install OpenVAS in Ubuntu 9.10 as I was very happy that when I got OpenVAS installed in Ubuntu latest build!
Even though the method is pretty straight forward but there are some minor differences this time while you install OpenVAS 3.x engine in your Ubuntu build. Below are the processes you can follow systematically to install openvas in Ubuntu. Just follow the process exactly what it is written on you will be on your way to roll.
Basically Ubuntu 9.x doesn’t come with cmake binary which you have to install before you start the OpenVAS Installation procedure. So just go ahead and follow the below methods:

$ sudo apt-get update
$ sudo apt-get install build-essential libgtk2.0-dev libglib2.0-dev libssl-dev htmldoc libgnutls-dev libpcap0.8-dev bison libgpgme11-dev libsmbclient-dev snmp pnscan
$ sudo updatedb
$ sudo ldconfig
$ cd /home/user/Desktop
$ mkdir OpenVAS
$ cd OpenVAS
$ wget -c http://wald.intevation.org/frs/download.php/683/openvas-libraries-3.0.0.tar.gz
$ wget -c http://wald.intevation.org/frs/download.php/684/openvas-scanner-3.0.0.tar.gz
$ wget -c http://wald.intevation.org/frs/download.php/685/openvas-client-3.0.0.tar.gz
$ sudo tar -zxvf openvas-libraries-3.0.0.tar.gz
$ sudo tar -zxvf openvas-scanner-3.0.0.tar.gz
$ sudo tar -zxvf openvas-client-3.0.0.tar.gz

Install OpenVAS Libraries

$ cd openvas-libraries-3.0.0
$ sudo ./configure [If you configure without sudo in Ubuntu it will show errors]
$ sudo make [Build the package and keep an eye of the errors if you come across with anything]
$ sudo make install [Install the packages]
$ sudo ldconfig
$ cd ../openvas/scanner-3.0.0

Install OpenVAS Scanner daemons

$ cd openvas-scanner-3.0.0
$ sudo ./configure [If you configure without sudo in Ubuntu it will show errors]
$ sudo make [Build the package and keep an eye of the errors if you come across with anything]
$ sudo make install [Install the packages]
$ cd ../openvas-client-3.0.0

Install OpenVAS Client GUI

$ cd openvas-client-3.0.0
$ sudo ./configure
$ sudo make
$ sudo make install
$ sudo updatedb
$ sudo ldconfig

Create cerficate for OpenVAS. [This step is mandatory]

$ sudo openvas-mkcert
Read the information displayed and press 'Ctrl+D' once you are done with it.

Create user account for OpenVAS Client. [It will be used to login to OpenVAS Client]

$ sudo openvas-adduser
Specify the new username and password and Press 'y' to add the newly created user.

Update your Openvas Plugins folder [/usr/local/lib/openvas/plugins] with the latest set of plugins.

$ openvas-nvt-sync [If you have write permission to plugins folder then no need to user sudo here]

Do a system reboot

$ sudo reboot

Load Openvas Daemon [For OpenVAS 3.x only]

$ openvassd

NOTE: In older versions of OpenVAS (2.x) an additional ’s’ was not there. In 2.x OpenVAS engines it’s like this:

$ openvasd -D

Create your Scan Assistant and make use of the new logins which you had created for OpenVAS to login. Accept the certificate [Choose the first check box] so that it wont really care who is the CA authority of the generated certificate. Disable all the plugins from the ‘Plugins’ left navigation area. And choose your preferred plugins either by searching or by giving specific ID which you want to scan for.

I hope this guide will help you to some extent! Please drop your suggestions/feedback as it gives more encouragement :)

Enjoy!
XyluX

Dec 22nd, 2009 | Posted in Security
  1. yaggi
    Feb 3rd, 2010 at 21:20 | #1

    Im having openvas ver 2 (BT4 Final), How can i change it to openvas 3..
    My BT4 final is installed in my machine

  2. XyluX
    Feb 4th, 2010 at 00:26 | #2

    Yeah sure, you can overwrite your OpenVAS with the 3.x edition. But just make sure that you are following the right priority of tar files to upgrade the installation. And also make sure that ‘openvasd’ daemon is not running while you are running the update process as it may mess up the things. So do a “$ sudo killall openvasd” 2-3 times unless and untill openvasd is fully terminated.

  3. Zack
    Feb 17th, 2010 at 01:28 | #3

    Hi Xylux, i cant find the folder in Backtrack 4 Final for the openvas folders.. please help

    • XyluX
      Feb 18th, 2010 at 22:36 | #4

      Zack,
      In BT v3 (I forgot which exact version it was), OpenVAS was pre-installed with the default OS Installation. However you can check for the existence of openvas by just typing ‘Op’ (case sensitive) and hit tabs twice and see if it lists OpenVAS-Client in the console of nor. If it doesn’t invoke then please go ahead with following the above method for installation.

  4. yaggi
    Feb 17th, 2010 at 13:30 | #5

    Hi folks, something is missing in the initial packages. please include libgcrypt11-devel

    • XyluX
      Feb 18th, 2010 at 23:38 | #6

      Yaggi, I tried with the exact above library files in my Ubuntu 9.10 and it got installed successfully. May be I had the libcrypt already installed in my box. None the less I tried the above procedure in a new Ubuntu machine. I am just wondering that why it asked you to install libcrypt in the same ubuntu 9.10 box!! Are you running Ubuntu 9.10 ?? Anyways I will give it a re-try in one vmware and if it asks then I will surely update the required library lists. Thanks for the update though :)

  5. Joachim
    Feb 20th, 2010 at 03:16 | #7

    With this guide I had my OpenVAS installatin on a clean and new Ubuntu 9.10 VMWare machine up and running in less than 30 minutes. No problems, no errors. Excellent. Many thanks.
    Joachim

  6. Eric
    Mar 4th, 2010 at 01:42 | #8

    Thank you for this, it was very helpful in getting OpenVAS set-up. The only thing this guide doesnt contain is how to start the client, which isnt hard other than it starts with a capital O. $ OpenVAS-Client

    • XyluX
      Mar 4th, 2010 at 10:59 | #9

      Yeah Eric, you are right that I haven’t mentioned the method on how to start the client. But earlier I have put in one of my related reply comments on how to do the same. I have posted this instruction in Zack’s post’s reply. I just said this FYI. No offense!

      - XyluX

Leave a comment

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>