Using Openvas - or trying like others and getting stuck too..

[marko]

On the latest Bbox, attempting to run Openvas.  this is one tough piece of software.

just like others, i chose to update bbox first using update script on main menu and apt-get.

then updated using the 'Services/Openvas/Update' script.

started the services and got my 4 check boxes - scanner, manager, admin, gsa

checked with script openvas-check-setup and got the A-ok

bombed out on the web interface login with:

VirtualBox:~$ Error: received handshake message out of context
Error: received handshake message out of context
Failed to receive data: A TLS packet with unexpected length was received.
Failed to receive data: A TLS packet with unexpected length was received.


Is this an Openvas issue currently, or just the implementation of Openvas on Backbox?  any clues would be helpful.. thanks much in advance.

[ZEROF]

Hi marko,

I just checked and all working fine. I will run update to see if i will get same error like you. Hope that you know that if you want to start web gui you need to use secure connection.

https://localhost:9392

I will come back after update ;)

EDIT:

True, OpenVas don't start after update, that say me that issue comes from OpenVas not BBox. I will look for solution. Hope to find something.

EDIT1:

All back to normal after running:

openvasmd --rebuild

PC restart and we are back to the game.

[marko]

wish it was that easy. updated again, started services, openvas-check..

now i get this:

Error received handshake message out of context

(what a pain..  :(  )

[ZEROF]

Ok i have found solution :). You need to reinstall openvas. And i made script to help you with that. You need to run from 01-05, and after from 1-12! This will take about 15-20min.

sudo -s

wget https://raw.githubusercontent.com/ZEROF/BackBox-Scripts/master/OpenVas_reinstall.sh -O openvas.sh

chmod +x openvas.sh

./openvas.sh

Tested 2 times and working !!! One more weekend project :)



Happy hacking !

[rogueit]

thank you for the script. However I am now getting
Starting OpenVAS Scanner: **** /usr/share/openvas/openvas-services could not be found. Install it and try again

can you tell me where I can find openvas-services?

[ZEROF]

You need to run all options in good order if you want script to do job for you.

[rogueit]

I have run the script twice
first the reinstall and then the settings
both times it fails at "5 - load plugins" with
****/usr/share/openvas/openvas-services could not be found. Install it and try again.

It is in /usr/bin/
should I create a symbolic link to it?

[ZEROF]

Must be something after last updates, i need to update my system and run script again. I will try to keep you posted.

EDIT:

From first look, my script need updates, but that i can't say for sure before running few tests.

[traveler]

wow. thanks for the script. I am also having issues with open vas. your script works for me. now i have a issue with starting openvas. It shows this on starting the services:

Code Select Expand



[i] Starting OpenVAS services...

Starting OpenVAS Scanner: base gpgme-Message: Setting GnuPG homedir to '/etc/openvas/gnupg'
base gpgme-Message: Using OpenPGP engine version '1.4.11'
syntax error, unexpected '.'
Parse error at or near line 89