Vulnerability Analysis · Module 05

OpenVAS (Greenbone)

Open-source vulnerability scanner with a regularly updated test feed.

ModuleModule 05PhaseVulnerability AnalysisTypeDefensive / AnalysisPlatformKali Linux

Safe to try on your own machine. Spin up your Kali Linux lab and practice away — on any system you own or have permission to test. That’s exactly how the pros learn.

Definition

OpenVAS, now part of the Greenbone Vulnerability Management (GVM) suite, is an open-source vulnerability scanning and management framework.

Primary purpose

Detect known vulnerabilities, misconfigurations, and outdated software using continuously updated Network Vulnerability Tests (NVTs).

Cybersecurity use

A free alternative to commercial scanners for vulnerability assessment in authorized testing and internal audits.

Key features

NVT feed

A regularly updated feed of tests covering thousands of known issues.

Web GUI (GSA)

The Greenbone Security Assistant for config, scheduling and reporting.

Scan configs

Predefined and custom configurations (Full and Fast, Discovery).

Credentialed scanning

Authenticated scans via SSH/SMB for deeper visibility.

CLI tooling

gvm-cli for scripted scan management outside the web UI.

Important commands

$gvm-setup

Initialize the GVM environment (feeds, database, admin user).

$gvm-check-setup

Verify the installation is configured correctly.

$gvm-feed-update

Update NVT, CERT and SCAP data feeds.

$gvm-start / gvm-stop

Start or stop GVM services.

$gvm-cli socket --xml "<get_tasks/>"

List scan tasks via the CLI / XML API.

Practical examples

01Feed update

command

greenbone-feed-sync --type GVMD_DATA
greenbone-feed-sync --type SCAP
greenbone-feed-sync --type CERT

Purpose Ensures the vulnerability database is current before scanning.

02New scan task (GSA Web UI)

Go to Scans -> Tasks -> New Task.
Set the target, e.g. 192.168.1.0/24.
Select the 'Full and Fast' scan config and run.

Purpose Runs a comprehensive but time-efficient scan across the subnet.

03CLI task listing

command

gvm-cli socket --xml "<get_tasks/>"

Purpose Retrieves scan tasks and status for scripted monitoring.

Important points

Resource intensive: Full scans with many NVTs can be slow and heavy on large ranges.
Feed currency: Detection accuracy depends on how recently the feeds were updated.
Setup complexity: Initial install and feed sync are more involved than turnkey scanners.
Open source: No licensing cost — popular for labs, small teams and learning.

Common use cases

Budget vulnerability management

Free alternative for ongoing assessment programs.

Authorized penetration testing

Baseline discovery before manual exploitation.

Security training / labs

Common in courses and home labs.

Compliance support

Demonstrate regular scanning for audit requirements.

Learn it in context

This tool is taught in Module 05

Read the full written notes, with diagrams, defense and detection.

Open Module 05