Scanning for Specific CVEs without 150k+ NVTs

Scanning / scan configuration
2

From a quick assessment of this question, it looks like python-gvm is required to create the scan config you desire:

  1. Create a scan config - either as you regularly do from the web-interface, or from python-gvm.
  2. modify_scan_config_set_nvt_selection(): Modifies the selected nvts of an existing scan config. The manager updates the given family in the config to include only the given NVTs.
  3. You can run the modified scan config from the web-interface or via Python with python-gvm.

You can see this thread also which describes a limit for some NVT families as:

gvmerr=<GvmResponseError status="400" message="Attempt to modify NVT in whole-only family [place any NVT-famlily here] Amazon Linux Local Security Checks">

I do not know ATM which families are limited in this way. It can likely be adjusted at some level. Also, there are other options for scanning with specific VTs. For example, running .nasl files on the command line with scripting, but this is more complicated than the solution described above. :slight_smile: