OpenVAS got from Nessus: nmap hydra nikto. Enforce security options in compiler Versions: 1.x = Nessus compatible (NTP protocol) 2.x = Nessus incompatible (OTP protocol) IANAġ1 OpenVAS 2.0 Released 17 th of December, 2008 What's new? Initial OVAL support NTP => OTP script_id => script_oid 64 bit support GUI client improved Bugfixes Code audit. 4 Gartner: 80% sofware will be open source by the yearĦ OVAL interpreters OVAL interpreters ovaldi Reference implementation OVAL Open Vulnerability Assessment language XML Good for local checks if you find needed definitionsħ Nmap Version 5 released recently Has scripting support NSE = Nmap Scripting Engine Yes, that Lua thingy Basic misconfiguration checks Enumeration checks Basic vulnerabilties check Missing reporting functions No severities / risk ratingsĨ OpenVAS Nessus GPL fork, Old name: Gnessus Continues open development of vulnerability scanner But OpenVAS follows its own path! Both local and remote checks are supported! Reportings Risk rating.ĩ What's different? Organizational part GPL (v2) license Open development Software in Public Interest (SPI) Change requests Democratic voting Open in every sense Your new idea? OpenVAS DevCon IRCġ0 What's different Technical part Take advantage of organization decisions/license Tools integration Practice what you preach! Flawfinder.

How to use nessus backtrack 5