[HowTo] Installation procedure of OpenVAS on Kali Linux 2022.1

[wingcommander'99]

I. POSTGRESQL.


Start the service for the gvm module (Greenbone Vulnerability Management)

To do this, open a terminal window:

sudo /etc/init.d/postgresql start

II. INSTALLATION OF GVM.


In a terminal window:

sudo apt install --install-recommends gvm -y

Once the installation is complete, let's go to the setup check:

sudo gvm-check-setup

Once the setup is complete you will have this type of output:




To avoid a "FIX" error message on next boot:




To do this, simply start the redis-server service:

sudo systemctl start redis-server@openvas.service

Enable this same service on every boot:

sudo systemctl enable redis-server@openvas.service

Perform a final check of the setup which will tell us that the installation is ok:




Then let's add a "kali" user and his password: (by default but both need to be changed)

sudo runuser -u _gvm -- gvmd --create-user=kali --password=kali

Once the installation is complete, let's go to the management console.

To do this, open a web window and enter the following address:

https://127.0.0.1:9392/login

Press ?Advanced? to accept the self-signed certificate despite the alert:




Fill in the identifiers created previously:




And here you are in the dashboard:




If any time after a restart of your Kali Linux OpenVAS does not start, redo
a setup check:

sudo gvm-check-setup

UPDATE:


it turns out after updating to kali linux version 2022.4, that in OpenVas it is impossible for the utility to get access to the logs. Just give the right rights to correct the incident with the line below:

sudo chmod 666 /var/log/gvm/openvas.log

[Fred Sheehan]

Good Post!

[Kali1990]

Hello,

that installation procedure is great.
I followed all the steps, but during the gvm-check-setup it stopped after Checkpoint 5 and gives me the output ERROR: No users found. You need to create at least one user to log in. To FIX the following was done sudo runuser -u _gvm -- gvmd --create-user=<name> --password=<password>. Unfortunately the user was not created.
Therefor I could not proceed. Has anyone an idea what could be the background that I'm not able to create a user and how to fix that issue.

Thanks in advance.

[Fred Sheehan]

They missed the last bit of creating the user, adding them to the admin group;

sudo -u _gvm gvmd --create-user=fred --password=pwd --role=Admin

and I typically remove the default account that was created at install;

sudo -u _gvm gvmd --delete-user=admin --inheritor=fred

[wingcommander'99]

They missed the last bit of creating the user, adding them to the admin group;

sudo -u _gvm gvmd --create-user=fred --password=pwd --role=Admin

and I typically remove the default account that was created at install;

sudo -u _gvm gvmd --delete-user=admin --inheritor=fred

Thank you for this tip, I had not gone that far, actually in the context of securing an account, it is more prudent to deactivate or delete the admin user.