domingo, 24 de octubre de 2010

Script instalacion de openvas y greenbone

Este script esta probado sobre ubuntu server 10.10. No instala el cliente, ya que la idea es manejarlo en remoto a través de http con el greenbone.

#!/bin/bash

cd /tmp

# Bajar los paquetes.

wget http://wald.intevation.org/frs/download.php/767/openvas-libraries-3.1.2.tar.gz
wget http://wald.intevation.org/frs/download.php/754/openvas-scanner-3.1.0.tar.gz
wget http://wald.intevation.org/frs/download.php/757/openvas-client-3.0.1.tar.gz
wget http://wald.intevation.org/frs/download.php/773/openvas-manager-1.0.2.tar.gz
wget http://wald.intevation.org/frs/download.php/774/greenbone-security-assistant-1.0.2.tar.gz

# Descompimir los paquetes

tar xvfz openvas-*
tar xvfz greenbone*

# Borrar los paquetes

rm *.gz

# Instalar dependencias

apt-get install -y build-essential libgtk2.0-dev libglib2.0-dev libssl-dev htmldoc libgnutls-dev libpcap0.8-dev bison libgpgme11-dev libsmbclient-dev snmp pnscan cmake uuid uuid-dev libgtk2.0-dev libxml2-dev libxslt-dev libmicrohttpd-dev doxygen sqlite3 libsqlite3-dev rsync

# Instalar librerias

cd /tmp/openvas-libraries-3.1.2/
./configure && make && make install
echo “include /usr/local/lib” >> /etc/ld.so.conf && ldconfig

# Instalar scaner

cd /tmp/openvas-scanner-3.1.0/
./configure && make && make install

# Instalar manager

cd /tmp/openvas-manager-1.0.2/
cmake .
make && make doc && make install && make rebuild_cache

#Instalar greenbone

cd /tmp/greenbone-security-assistant-1.0.2/
cmake .
make && make doc && make install && make rebuild_cache

# Limpiar tmp

cd /tmp
rm -r openvas* greenbone*

# Configurar openvas

openvas-mkcert
openvas-adduser
openvas-nvt-sync

# Arrancar el demonio

openvassd

# Crear el certificado de cliente

openvas-mkcert-client -n om -i

# Arrancar el manager

openvasmd --sport 9390 --update &

# Arrancar greenbone

gsad --mport 1241 -v --http-only