gvm

The Greenbone Vulnerability Manager is a modular security auditing tool, used for testing remote systems for vulnerabilities that should be fixed.

This package installs all the required packages. It provides scripts to setup, start and stop the GVM services.

The tool was previously named OpenVAS.

Installed size: 48 KB
How to install: sudo apt install gvm

gvm-check-setup

root@kali:~# gvm-check-setup -h
gvm-check-setup 25.04.0
 This script is provided and maintained by Debian and Kali.
  Test completeness and readiness of GVM-25.04.0
Step 1: Checking OpenVAS (Scanner)... 
        OK: OpenVAS Scanner is present in version 23.23.1.
        OK: Notus Scanner is present in version 22.7.2.
        ERROR: No CA certificate file for Server found.
        FIX: Run 'sudo runuser -u _gvm -- gvm-manage-certs -a -f'.

 ERROR: Your GVM-25.04.0 installation is not yet complete!

Please follow the instructions marked with FIX above and run this
script again.

 IMPORTANT NOTE: this script is provided and maintained by Debian and Kali.
 If you find any issue in this script, please report it directly to Debian or Kali

gvm-feed-update

root@kali:~# gvm-feed-update -h
[>] This script is now deprecated
[>] Please use 'sudo greenbone-feed-sync' instead

gvm-setup

root@kali:~# gvm-setup -h
This script is provided and maintained by Debian and Kali.
 If you find any issue in this script, please report it directly to Debian or Kali

[>] Starting PostgreSQL service

[>] Creating GVM's certificate files

[>] Creating PostgreSQL database
[i] User _gvm already exists in PostgreSQL
[i] Database gvmd already exists in PostgreSQL
[i] Role DBA already exists in PostgreSQL

[*] Applying permissions
GRANT ROLE
[i] Extension uuid-ossp already exists for gvmd database
[i] Extension pgcrypto already exists for gvmd database
[i] Extension pg-gvm already exists for gvmd database
[>] Migrating database
[>] Checking for GVM admin user
[*] Creating user admin for gvm
[*] Please note the generated admin password
[*] User created with password '125ba0dd-9486-4c62-895a-b06bd734cd7b'.
[*] Configure Feed Import Owner
[*] Define Feed Import Owner

gvm-start

root@kali:~# gvm-start -h
[>] Please wait for the GVM services to start.
[>]
[>] You might need to refresh your browser once it opens.
[>]
[>]  Web UI (Greenbone Security Assistant): https://127.0.0.1:9392

gvm-stop

root@kali:~# gvm-stop -h
[>] Stopping GVM services
* gsad.service - Greenbone Security Assistant daemon (gsad)
     Loaded: loaded (/usr/lib/systemd/system/gsad.service; disabled; preset: disabled)
     Active: inactive (dead)
       Docs: man:gsad(8)
             https://www.greenbone.net

* gvmd.service - Greenbone Vulnerability Manager daemon (gvmd)
     Loaded: loaded (/usr/lib/systemd/system/gvmd.service; disabled; preset: disabled)
     Active: inactive (dead)
       Docs: man:gvmd(8)

Sep 08 04:54:06 kali systemd[1]: Starting gvmd.service - Greenbone Vulnerability Manager daemon (gvmd)...
Sep 08 04:54:06 kali systemd[1]: gvmd.service: Can't open PID file '/run/gvmd/gvmd.pid' (yet?) after start: No such file or directory
Sep 08 04:54:09 kali systemd[1]: Started gvmd.service - Greenbone Vulnerability Manager daemon (gvmd).
Sep 08 04:54:19 kali systemd[1]: Stopping gvmd.service - Greenbone Vulnerability Manager daemon (gvmd)...
Sep 08 04:54:19 kali systemd[1]: gvmd.service: Deactivated successfully.
Sep 08 04:54:19 kali systemd[1]: Stopped gvmd.service - Greenbone Vulnerability Manager daemon (gvmd).
Sep 08 04:54:19 kali systemd[1]: gvmd.service: Consumed 2.713s CPU time, 9.4M memory peak.

* ospd-openvas.service - OSPd Wrapper for the OpenVAS Scanner (ospd-openvas)
     Loaded: loaded (/usr/lib/systemd/system/ospd-openvas.service; disabled; preset: disabled)
     Active: inactive (dead)
       Docs: man:ospd-openvas(8)
             man:openvas(8)

Sep 08 04:54:04 kali systemd[1]: Starting ospd-openvas.service - OSPd Wrapper for the OpenVAS Scanner (ospd-openvas)...
Sep 08 04:54:06 kali systemd[1]: Started ospd-openvas.service - OSPd Wrapper for the OpenVAS Scanner (ospd-openvas).
Sep 08 04:54:19 kali systemd[1]: Stopping ospd-openvas.service - OSPd Wrapper for the OpenVAS Scanner (ospd-openvas)...
Sep 08 04:54:20 kali systemd[1]: ospd-openvas.service: Deactivated successfully.
Sep 08 04:54:20 kali systemd[1]: Stopped ospd-openvas.service - OSPd Wrapper for the OpenVAS Scanner (ospd-openvas).
Sep 08 04:54:20 kali systemd[1]: ospd-openvas.service: Consumed 3.401s CPU time, 100M memory peak.

* notus-scanner.service - Notus Scanner
     Loaded: loaded (/usr/lib/systemd/system/notus-scanner.service; disabled; preset: disabled)
     Active: inactive (dead)
       Docs: https://github.com/greenbone/notus-scanner

Sep 08 04:54:14 kali notus-scanner[1783913]:     )
Sep 08 04:54:14 kali notus-scanner[1783913]: notus.scanner.errors.AdvisoriesLoadingError: Can't load advisories. /var/lib/notus/products is not a directory.
Sep 08 04:54:14 kali notus-scanner[1783913]: Exception ignored in atexit callback <function exit_cleanup at 0x7ffff4aeaca0>:
Sep 08 04:54:14 kali notus-scanner[1783913]: Traceback (most recent call last):
Sep 08 04:54:14 kali notus-scanner[1783913]:   File "/usr/lib/python3/dist-packages/notus/scanner/utils.py", line 101, in exit_cleanup
Sep 08 04:54:14 kali notus-scanner[1783913]:     sys.exit()
Sep 08 04:54:14 kali notus-scanner[1783913]: SystemExit:
Sep 08 04:54:14 kali systemd[1]: notus-scanner.service: Main process exited, code=exited, status=1/FAILURE
Sep 08 04:54:14 kali systemd[1]: notus-scanner.service: Failed with result 'exit-code'.
Sep 08 04:54:19 kali systemd[1]: Stopped notus-scanner.service - Notus Scanner.

Learn more with OffSec

Want to learn more about gvm? get access to in-depth training and hands-on labs:

• Introduction to Vulnerability Tracking: 2.2. Scanning a Server for Vulnerabilities