{"id":34216,"date":"2024-09-26T13:20:46","date_gmt":"2024-09-26T20:20:46","guid":{"rendered":"https:\/\/sn1persecurity.com\/wordpress\/?page_id=34216"},"modified":"2024-09-26T13:41:54","modified_gmt":"2024-09-26T20:41:54","slug":"openvas-gvm-integration","status":"publish","type":"page","link":"https:\/\/sn1persecurity.com\/wordpress\/documentation\/openvas-gvm-integration\/","title":{"rendered":"OpenVAS GVM Integration"},"content":{"rendered":"

First, verify that GVM is running and configured properly by running gvm-start<\/code>. If no errors are displayed, ensure that you can login to the web UI at https:\/\/127.0.0.1:9390<\/a>. If there are any errors displayed, Sn1per may not be able to communicate with GVM properly. Run gvm-check-setup<\/code> to check your setup again.<\/p>\n

Run the following command to update the permissions: sudo chmod 777 \/var\/run\/gvm\/gvmd.sock<\/code><\/p>\n

NOTE:<\/strong> This integration requires GVM 21.x and a valid Sn1per Professional v10.0 or higher to work properly.<\/p>\n

To integrate GVM 21.x vulnerability scans into Sn1per, update the following settings in your Sn1per configuration template under the \/sniper\/conf\/<\/code> directory:<\/p>\n

\n
# OPENVAS CONFIG\r\nOPENVAS=\"1\"\r\nOPENVAS_USERNAME=\"admin\"\r\nOPENVAS_PASSWORD='mypasswordhere!'\r\nOPENVAS_HOST=\"127.0.0.1\"\r\nOPENVAS_PORT=\"9390\"\r\nOPENVAS_RUNAS_USER=\"kali\"<\/code><\/pre>\n<\/div>\n
NOTE:<\/strong> You will need to specify a local (non-root) Linux account to initiate GVM 21.x scans using Sn1per by updating the “OPENVAS_RUNAS_USER” setting in your Sn1per configuration file.<\/p>\n
To test your setup, run the following commands:<\/p>\n
\n
su - $OPENVAS_RUNAS_USER # Where $OPENVAS_RUNAS_USER is the non-root Linux account you setup \r\ngvm-cli socket --xml \"<get_version\/>\"<\/code><\/pre>\n<\/div>\n
This will prompt for your OpenVAS username and password. Once entered, it should display the following:<\/p>\n
\n
Enter username: admin\r\nEnter password for admin: \r\n<get_version_response status=\"200\" status_text=\"OK\"><version>21.4<\/version><\/get_version_response><\/code><\/pre>\n<\/div>\n
You can then run a scan by selecting the configuration template you edited in the previous step to integrate OpenVAS\/GVM vulnerability scans with Sn1per.<\/p>\n
Demo<\/h4>\n
\n