Cybrary ForgeCYBRARY / FORGE

OpenVAS / Greenbone

v22.4.1Greenbone Networks

Authenticated and unauthenticated vulnerability scanning across an estate, driven by the Greenbone community feed. Produces per-host findings with CVE, CVSS and remediation guidance, plus report export. The range scans the authored estate and reports the vulnerabilities the scenario actually models.

Category
Vulnerability scanning
Package
gvm
Runs on
Linux
Commands
gvm-cli, gvm-script, openvas, greenbone-feed-sync
Console
https://gvm.range.local:9392

Findings come from the scenario's authored vulnerability state. No probe is sent anywhere.

Install it

The scripts below install the real Greenbone Networks package on your own machine — read them first, and run them somewhere you are allowed to change. Inside the range, one press puts the simulated package on your next machine.

Linux installer (shell script)
install-openvas.sh
Windows installer (PowerShell)
Install-openvas.ps1

No native Windows build. Use a Linux host in the range, or run it under WSL.

On a range machine
Add it to your kit and every machine you launch comes with it.

On Linux

Debian, Ubuntu, Kali (apt)

  1. Refresh the package lists
    sudo apt update
  2. Install OpenVAS / Greenbone
    sudo apt install -y gvm

RHEL, Fedora (dnf)

  1. Install OpenVAS / Greenbone
    sudo dnf install -y gvm

    Package names drift between distributions; search first if this one misses.

Arch (pacman)

  1. Install OpenVAS / Greenbone
    sudo pacman -S --noconfirm gvm

Alpine (apk)

  1. Install OpenVAS / Greenbone
    sudo apk add gvm

    Package names drift between distributions; search first if this one misses.

Check it worked

  1. Confirm it landed on PATH
    which gvm-cli
  2. Check the version
    gvm-cli --version

    The range reports 22.4.1.

Remove it

  1. Take it off again
    sudo apt remove --purge gvm

On Windows

No native Windows build. Use a Linux host in the range, or run it under WSL.

Windows Subsystem for Linux

  1. Install a Linux userland on the Windows host
    wsl --install -d Ubuntu

    The upstream project has no native Windows build; WSL is the usual way round it.

  2. Install OpenVAS / Greenbone inside it
    wsl sudo apt install -y gvm

Inside the range

  1. Tick it on the launch screen

    Under OpenVAS / Greenbone's category on the advanced tool shelf. A lab that depends on it locks the toggle on and says why.

  2. Or install it from a range terminal
    sudo apt install -y gvm

    The simulated package manager seeds the same binaries, config and receipt the shelf toggle does.

  3. Everything here is simulated

    No software is downloaded and nothing executes — the range answers from authored fixtures.

Labs that use OpenVAS / Greenbone

No lab locks this one on yet — tick it on the launch screen and take it into any scenario.