Is it possible to create vulnerability assessments with only using OpenVAS Scanner 20.08?

Hello everyone. This is my first time posting in Greenbone and love your stuff. Been reading your documentation and architecture for GVM 20.08, it is very interesting. The reason why I am posting on this board is I am having difficulty building an environment which only uses OpenVAS Scanner to scan remote servers. So my question, Is it possible to use OpenVAS Scanner without GVM?

The libraries I have installed are as follows:
gvm_libs: 20.8.0
openvas_scanner: 20.8.0
openvas_smb: 1.0.5
ospd: 20.8.1
ospd_openvas: 20.8.0

The environment uses Ubuntu 20.04 and my installation process uses this process:
cd /build &&
wget --no-verbose https://github.com/greenbone/gvm-libs/archive/$gvm_libs_version.tar.gz &&
tar -zxf $gvm_libs_version.tar.gz &&
cd /build/*/ &&
mkdir build &&
cd build &&
cmake -DCMAKE_BUILD_TYPE=Release … &&
make &&
make install &&
cd /build &&
rm -rf *

The issue I receive is when I want to connect ospd-openvas to a unix socket and when configuring Redis, here are the commands respectively:
Redis configuration:
redis-server --unixsocket /run/redis/redis.sock --unixsocketperm 700 --timeout 0 --databases 128 --maxclients 4096 --daemonize yes --port 6379 --bind 0.0.0.0

ospd-openvas configuration:
ospd-openvas --log-file /usr/local/var/log/gvm/ospd-openvas.log --unix-socket /data/ospd.sock --log-level INFO

I would appreciate any help!

Hi @roma,

Yes, it is possible. You can use the gvm-cli in the gvm-tools package. It is a command line client which supports OSP to communicate with ospd-openvas.

2 Likes

Sorry for the late reply. Thank you @jjnicola.