Changes between Version 1 and Version 2 of NspwUprouse/Agenda/pentest
- Timestamp:
- Sep 9, 2021, 8:40:43 PM (3 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
NspwUprouse/Agenda/pentest
v1 v2 19 19 - To install OpenVAS on kali, 20 20 {{{ 21 apt-get install openvas21 sudo apt-get install openvas 22 22 }}} 23 23 24 - Once the installation is finished, type ''' openvas-setup''' on the terminal to do the initial setup. At the end of the setup, it will give you a long password for the default user ‘admin’. '''Please note it somewhere'''.24 - Once the installation is finished, type '''sudo gvm-setup''' on the terminal to do the initial setup. At the end of the setup, it will give you a long password for the default user ‘admin’. '''Please note it somewhere'''. 25 25 26 26 - When the OpenVAS setup process is finished the OpenVAS manager, scanner and services are listening on ports 9390, 9391, 9392, and on port 80. You can use the following netstat command to check if these services are listening: 27 27 {{{ 28 netstat –antp28 sudo netstat –antp 29 29 }}} 30 30 … … 39 39 - If the OpenVAS services are not running then use the following command to start these services: 40 40 {{{ 41 openvas-start41 sudo gvm-start 42 42 }}} 43 43 … … 66 66 OPENVAS is a whole set of tools in detecting vulnerabilities, reporting, and scheduling tasks. Due to our limited environment, you may refer youtube and google for further usages. 67 67 68 - Use openvas-stop to terminate OpenVAS service.68 - Use gvm-stop to terminate OpenVAS service. 69 69 70 === Port Scanner – Zenmap ===71 70 72 Zenmap is a nmap based port scanner. It has a basic GUI and will help testers to find open blocked or filtered ports of a target easily. In addition to showing Nmap's normal output, Zenmap can arrange its display to show all ports on a host or all hosts running a particular service. It summarizes details about a single host or a complete scan in a convenient display. Zenmap can even draw a topology map of discovered networks. The results of several scans may be combined together and viewed at once.73 74 - Open Zenmap from Applications -- > Information Gathering zenmap.75 76 - You can specify your Target and select a required profile and Scan.77 78 - The '''Intense scan''' in the profile list is just one of several scan profiles that come with Zenmap. Choose a profile by selecting it from the '''Profile''' combo box. Profiles exist for several common scans. After selecting a profile the Nmap command-line associated with it is displayed on the screen. Of course, it is possible to edit these profiles or create new ones.79 80 - Once a scan is finished you can check the results on,81 {{{82 Nmap Output – which is the default view of all results83 Ports/ Hosts – All port statuses will be presented in a user-friendly way84 Topology – This will show your target/s and the traceroutes85 Host Details – All details on the target device86 Scans – this will list down the previous scans87 }}}88 89 In a controlled system if you find any unknown ports that are open, then it might be a potential risk or a vulnerability that the target is having.90 71 91 72 === Distributed Denial of Service Pentest === 92 73 93 F orm Wikipedia74 From Wikipedia 94 75 95 76 A denial-of-service attack (DoS attack) is a cyber-attack where the attacker looks to make a machine or network resource unavailable to its deliberated users by temporarily or indefinitely services of disturbing a host connected to the Internet. Denial of service is usually accomplished by flooding the targeted machine or resource with excessive requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled.
