How To Setup: Metasploitable 2 & OpenVAS (Tutorial)

Рет қаралды 2,842

MyDFIR

Күн бұрын

Пікірлер: 37

@JustinJ. 4 ай бұрын

For those who didn't know, VMware Workstation Pro is now free for personal use, no license required, no restrictions 👍

@blackopszombiekill3r 4 ай бұрын

But I thought it only allows 1 VM? So you can't spin up 2-5 vm to have them talk to each other?

@MyDFIR 4 ай бұрын

That shouldn't be the case... or atleast not that I am aware of. I was able to use 2 VMs to talk to each other recently.

@blackopszombiekill3r 4 ай бұрын

@@MyDFIR sweet! I’ll try it out

@TheChemistDIY 4 ай бұрын

When i was attending the CISA Federal Defense Skilling Academy Boot camp to obtain my Sec+ Cert, they had preconfigured VMs like this for log Analysis. We briefly touched on OpenVas, Snort, Green Bone.. ect. Because as with all boot camps you only have a few months to prepare you for the exam.. which for us was the Sec+. We ran our first scan to see what "Normal" looks like. After a few attempts at attacking our target machine we then went back to see what evil looks like . This was One of the best lessons that i learned during that course.. its hard to find evil if you dont know what normal looks like on your network. On that note, i always wanted to create my own home lab in just the same fashion but struggled to find decent tutorials that put it all together in just the same fashion as CISA (what i was familiar with). You sir have done an excellent job here. Cant wait to see you attack the machine to expose the evil log files for review.

@MyDFIR 4 ай бұрын

Thank you, the “attack & review” is extremely valuable. In fact, I’ve created a couple project series on this channel to illustrate that! Again, super valuable and thank you for sharing ❤️

@RahulRoy0023 4 ай бұрын

#Request - Sir can you please make projects on Qradar CE

@offdre2482 4 ай бұрын

ya mine did not create a gvmd database going through trouble shooting now. Got a class assignment due tomorrow....yay.

@MyDFIR 3 ай бұрын

Interesting, try from a fresh kali install

@gwalchmei 4 ай бұрын

Sweet. Concise and clear! Again, one of the best vids around for this

@MyDFIR 4 ай бұрын

Much appreciated!

@CliftonRamsey-yh3nr 3 ай бұрын

Fantastic video! Thorough and straight forward as usual. I did run into an issue when I got towards the end and my "Feed Status" wouldn't update. It would just show the following: "NVT is 3 days old & SCAP, CERT, and GVMD_DATA are all "Update in progress.." Any advice how to get them to update?

@MyDFIR 3 ай бұрын

Thanks! If its in progress you’ll need to wait and depending on the specs, it could take a while

@CliftonRamsey-yh3nr 3 ай бұрын

@@MyDFIR I have waited since my original response about 3 days ago and still nothing. I have a relatively new PC (a few years old now) so I can't believe it's an issue with outdated hardware. Not a huge deal, but it would be nice if it worked. I appreciate the response! Keep up the great work! :)

@Jashank 4 ай бұрын

@MyDFIR This video on Metasploitable2 and OpenVas was incredibly informative and well-presented! Thanks for creating such valuable content. I recently configured OpenVas on DigitalOcean and am attempting to perform internal network pentesting for a client. However, I'm encountering issues with port forwarding, which is limiting its full capabilities. Additionally, I'm on a VPN, which complicates things further. Do you have any suggestions for a better approach to resolve these issues? Thanks in advance!

@MyDFIR 4 ай бұрын

Thanks! Is this black box testing? Part of me thinks its not since you are port forwarding because if it isnt, it would be easier to spin up openvas inside the network as it is an internal network pentest.

@Jashank 4 ай бұрын

@@MyDFIR It is grey box testing and they have just given me VPN access for accessing their internal network but a lot of scanning tools aren't that reliable when on VPN. So I was wondering as I am not going to client's location as of now so in mean time what else can be done when we talk about Internal Network pentesting on VPN? Are they special tools that give better results when doing pentesting on VPN?

@chathurangaonnet 4 ай бұрын

As always ❤

@irocz5150 4 ай бұрын

in my case openvas did not work ..bunch or errors related to postgres.

@MyDFIR 4 ай бұрын

Odd, is this a new install of kali or an existing one? Running with sudo? Could be permission related.

@irocz5150 4 ай бұрын

@@MyDFIR Was a new build. I download Ubuntu and the instalation was done..now the issue is error URL NOT FOUND The requested URL is not available.

@AceS_34 4 ай бұрын

Can you make a video on how to set up a isolated virtual machine

@MyDFIR 4 ай бұрын

Take a look at this video, it will explain the different networking options which can help you setup an isolated machine. Cybersecurity Tip: Build A Basic Home Lab (2/3) kzbin.info/www/bejne/a5rEl3Zsq89qoa8

@AceS_34 4 ай бұрын

@@MyDFIR thanks so much. Awesome video