Installing OpenVas on Debian 10 Buster

Thank god you do not have to compile OpenVas from source on Debian Buster like I have to do in prior Debian releases. Today we will go step by step on all of the steps needed to get OpenVas up and running.

As always, first things first, let us update APT.

Shell

Installing our binaries is as simple as this now, there are lots of dependencies but Debian 10 seems to have all of them in the repositories.

Shell

Running setup should do any further downloading of external files and compiling.

Shell

Notice at the end of the setup that your admin password is given. Copy it down before you lose it! Change it immediately after logging in.

Change Password

Optional: Change Listening IP Address

If you need access to your scanner outside of the setup machine, follow these steps to change the listening address. Change external_ip to your ip address. Now I did try 0.0.0.0 but picked up header errors, this change did work though.

Shell

You should now be able to navigate to your external ip address and port to get to your login screen. Your default login credentials are UserName:admin and the password is the one you received earlier from the setup script.

https://external_ip:9392
Login Screen

To change your password, the menu to the far right administration->users

Change Password
Change Password
Change Password

Automatically Update Feeds with Crontab

We can update our database every night to make sure we have up to date feeds of vulnerabilities. To do this we will just make a bash script and run it at 1am every night.

Shell
Shell

Now add it to your crontab -e

Shell
Shell

Notes:

If during a long scanning process the web interface starts timing out an adjustment can be made, listed here.

An internal error occurred. Diagnostics: Could not authenticate to manager daemon.
Could not authenticate to manager daemon
Shell

And add this code to the end.

Shell

Now restart your services.

Shell
Continue Reading

Installing and Configuring Nagios on Debian 10 Buster

  • Basic understanding of Linux and the Bash shell
  • A Debian 10 Buster base install
  • A static I.P. address on your Debian host
  • You have sudo access or logged in as root

First thing first, let us make sure our install is up to date.

Shell

1) Prerequisites

Shell

2) Download and Compile Source

Shell

3) Create Your Nagios User and Nagios Group

Shell

4) Install

Shell

5) Configure Apache2

Shell

Now reload apache2

Shell

6) Create CGI User

Shell

7) Enable Start of Nagios Service on Boot and Start Nagios

Shell

8) Restart Apache2

Shell

If you navigate to your IP address and append /nagios into the URL you will see we have a working installation, but we are a long way from being done. Right now we are only monitoring our localhost and our setup has not been protected by any credentials. For this installation we will work from the I.P. address of 192.168.0.8 which is the one of this Nagios server.

http://192.168.0.8/nagios

You will be prompted for credentials which will be nagiosadmin and your set password.

Nagios Home Screen
Continue Reading