Skip to main content

ospd based scanner for openvas

Project description

Greenbone Logo

ospd-openvas

GitHub releases PyPI code test coverage Build and test

ospd-openvas is an OSP server implementation to remotely control OpenVAS Scanner and Notus Scanner.

Once running, you need to configure OpenVAS Scanner and Notus Scanner for the Greenbone Vulnerability Manager, for example via the web interface Greenbone Security Assistant. Then you can create scan tasks to use both scanners.

Installation

Requirements

Python 3.7 and later is supported.

ospd-openvas has dependencies on the following Python packages:

  • defusedxml
  • depreacted
  • lxml
  • packaging
  • paho-mqtt
  • psutil
  • python-gnupg
  • redis

Mandatory configuration

The ospd-openvas startup parameter --lock-file-dir or the lock_file_dir config parameter of the ospd.conf config file needs to point to the same location / path of the gvmd daemon and the openvas command line tool (Default: <install-prefix>/var/run). Examples for both are shipped within the config sub-folder of this project.

Also in order to be able to use Notus ospd-openvas must connect to a MQTT broker, such as Mosquitto in order to communicate. With the parameter --mqtt-broker-address (Default: localhost) the correct address must be given as well as the corresponding port with --mqtt-broker-port (Default: 1883).

Please see the Details section of the GVM release notes for more details.

Optional configuration

Please note that although you can run openvas (launched from an ospd-openvas process) as a user without elevated privileges, it is recommended that you start openvas as root since a number of Network Vulnerability Tests (NVTs) require root privileges to perform certain operations like packet forgery. If you run openvas as a user without permission to perform these operations, your scan results are likely to be incomplete.

As openvas will be launched from an ospd-openvas process with sudo, the next configuration is required in the sudoers file:

sudo visudo

add this line to allow the user running ospd-openvas, to launch openvas with root permissions

<user> ALL = NOPASSWD: <install prefix>/sbin/openvas

If you set an install prefix, you have to update the path in the sudoers file too:

Defaults        secure_path=<existing paths...>:<install prefix>/sbin

Usage

There are no special usage aspects for this module beyond the generic usage guide.

Please follow the general usage guide for ospd-based scanners:

https://github.com/greenbone/ospd-openvas/blob/main/docs/USAGE-ospd-scanner.md

Support

For any question on the usage of ospd-openvas please use the Greenbone Community Portal. If you found a problem with the software, please create an issue on GitHub. If you are a Greenbone customer you may alternatively or additionally forward your issue to the Greenbone Support Portal.

Maintainer

This project is maintained by Greenbone Networks GmbH.

Contributing

Your contributions are highly appreciated. Please create a pull request on GitHub. Bigger changes need to be discussed with the development team via the issues section at GitHub first.

For development you should use poetry to keep your python packages separated in different environments. First install poetry via pip

python3 -m pip install --user poetry

Afterwards run

poetry install

in the checkout directory of ospd-openvas (the directory containing the pyproject.toml file) to install all dependencies including the packages only required for development.

The ospd-openvas repository uses autohooks to apply linting and auto formatting via git hooks. Please ensure the git hooks are active.

poetry install
poetry run autohooks activate --force

License

Copyright (C) 2018-2022 Greenbone Networks GmbH

Licensed under the GNU Affero General Public License v3.0 or later.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

ospd_openvas-22.4.4.tar.gz (180.7 kB view details)

Uploaded Source

Built Distribution

ospd_openvas-22.4.4-py3-none-any.whl (126.3 kB view details)

Uploaded Python 3

File details

Details for the file ospd_openvas-22.4.4.tar.gz.

File metadata

  • Download URL: ospd_openvas-22.4.4.tar.gz
  • Upload date:
  • Size: 180.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.8.16

File hashes

Hashes for ospd_openvas-22.4.4.tar.gz
Algorithm Hash digest
SHA256 c6d1db5f3d11e423abb001070938b326c19a1f0137d83abd7c35c46e3593ed8a
MD5 93662b5515a4928c3ece4baa92024b04
BLAKE2b-256 d69b05b6ba7ebf3b225106d2bb5a79399b8f429cc4be982f17bdfd2e4d5819b2

See more details on using hashes here.

Provenance

File details

Details for the file ospd_openvas-22.4.4-py3-none-any.whl.

File metadata

File hashes

Hashes for ospd_openvas-22.4.4-py3-none-any.whl
Algorithm Hash digest
SHA256 1595cc178cd5c935e724866affbda8efc343d97b97d160235803875eb029f8e1
MD5 e5494e3a28125bf2acd0ad98c0ffc9d8
BLAKE2b-256 2fec164e913ead3a24a1851a2447ae3932df954b17794af95444ae420a908887

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page