Inside of our lab, we're in the Kali system right here and just know that some
of these may be installed already in your environment
I just want to walk through some of the prereqs just in case
So we're going to go ahead right click and go to open terminal and do remember
a lot of these are going to be in pseudo
So you will need to know your password
Now I'm going to skip the update and upgrade so that way
We can save a little bit of time here, but that is one of the steps that you
should always take before installing new software
inside of a Linux or really any other operating system out there and
in order for us to do this we're going to need to install GVM which is green
bone
vulnerability manager which is the backbone of open VOS as a
vulnerability assessment tool in order to do that and I'll have the code for
you below
the pseudo apt install
GVM
Golf Victor might and so we're going to go ahead and type that and say yes, we
're going to
We're wanting to do that for sure and as you could see here. I'm going to pop
out and zoom in for us real quick
You can see that there are a few dependencies along with this one of them being
the green bone security assistant
Which does work as a standalone if you want to use that we make over that at a
different time
G SAD GVM tools and also some things upgrading into the actual operating itself
to support
so
Knowing that we're just going to go ahead and press yes and go ahead and
connect and start up downloading the files and get ready for installation
I'm going to skip right here because I don't want to have to wait through all
this and we'll be right back
Just like that. We're back and now it's time for us to go ahead and start
setting up some of the things behind the scenes
This is pretty simple and straightforward as well. We're just going to do a
pseudo
GVM - set up in order to get our background system
configured for the actual scanning that's going to take place now do keep in
mind
There's going to be a lot of little skipping in this to cut time out
I'm not going to skip any of the steps whatsoever
And just want you to know that some of these may require a cup of coffee
So we're going to go ahead and start and what it's doing right now. Let me pop
out and zoom in for you real quick to explain some of this
If the GVM is not installed on the system itself
It's going to go behind the scenes and install some of the pre-requisite
services and accounts for instance
What we're taking a look at right here is the GVM admin
For the actual overall scanner itself and right above that
You can see that extensions are being made along with the actual database
required for the actual
Vulnerability scanner itself. So let me go ahead and zoom all the way down and
this part right here again
It's going to take some time
So I'm going to pause here and wait for it to go to our next prompt before we
continue now
You may notice that after the initial setup has completed and I'm going to zoom
in for you here real quick
That you get a message at the bottom that says you can simply run
GVM check setup to make sure everything is configured correctly
And that's exactly what we're going to be doing next
Because there may be some prerequisites that didn't install correctly or we may
have pre-existing stuff on the Kali system
That wasn't exactly done to standard, but that's okay
Just remember the Gudud to run this as pseudo. So we're going to run GVM -
Check - setup
We're going to go ahead and run and as you can see here
I'm going to zoom in for you real quick open boss scanner is present in version
23.20.1
And this is where I had in the notes right above this particular video that you
may notice that
GVM and OpenVos are names that interchange
simultaneously or as we go throughout this lesson and
That's because open vos themselves on the open vos or website do this
So let me go ahead and zoom out make sure that we ran everything okay pop back
in and all of our checks go through
Okay, as you scroll up down, you'll see a bunch of okay's we do get a warning
Let's see what that warning is and if it will stop us
Warning database Prose grass has a collection version mismatch the detail that
the database was created using
40 now there are different ways that we can fix this and or we could just leave
it as is in the lab
The way you used to be able to go through and verify that this is done on your
own
You're going to simply ignore this error or warning because we already have
Nessus installed on the system
What this is saying that the database that Nessus you did did not
Update to the same version that open vos or GVM is using now
Some of this can actually be fixed making sure that you run that update upgrade
at the beginning of this as well
To just know that this is not really that big of a deal
But the one right below it that says error the post grass sequel DB does not
exist
So that one we will be running so we take the very same command that they gave
us to install this and run that
And you can see that it created all the accounts except it didn't because TV
GV DMD does not exist as a database
Hmm might need to go back and double check this and I'm leaving all these
errors in on purpose
So that way you can anticipate some of these errors when you go through and
install this on your own
I'm going to the recommendation that the install gave us I ran the command and
now I am able to
also create the accounts so now we can go through and make sure that we run a
Setup check to ensure that our installation has installed successfully
Daddam I'm going to be leaving this open vos GVM install still on the Kali box
for this actual template inside of our lab
I would challenge you on the side to install this on the in boot to
Set setup that we have the in boot to desktop as it's a POSIX based system
And you can also install this the exact same way you would on Kali
So that way if you ran into any troubles that were separate from the ones that
I just ran into you can learn how to troubleshoot
But also still have the open boss vulnerability scanner at your fingertips
inside of the Kali box
I ran through the check one more time after running the recommended
recommendations from the GVM check setup and
after doing the
Recommendations and running it again. It said hey, you're good to go
So we're the last command that I ran on here was
The check set up again, and it tells me that we're good to go
So it seems like your installation is okay
Well, if you open up a web browser and go to
7001 or local host and go to port 9392
You get this and this is the web page where we monitor and make all our
configurations and run
Open VOS from the actual system itself. So it's HTTPS self-signed
We're going to accept and go now by default the username and password is going
to be GVM
tab GVM and
I'm just gonna say that because we're gonna
Keep going back into it and wouldn't you know it open?
VOS has already set up the whole lot easier to set up than Nessus and you get a
lot more feedback from the actual check setup
For us to be able to go through and verify the installation was actually
complete
Again, definitely recommend that you try this on the actual Ubuntu desktop that
we have set up inside the lab as well
But it'll be right here for you to run in case you want to come into the Kali
box and see the difference and run it for yourself