[Openvas-devel] OpenVAS bridge for Metasploit

NopSec info at nopsec.com
Wed Dec 29 20:34:32 CET 2010


On 12/29/2010 02:27 PM, Vlatko Kosturjak wrote:
> Hello!                                                                                                                       
>
> OpenVAS bridge for Metasploit is available in Metasploit.
> Just update Metasploit with msfupdate or svn update.
>                                                                                                                              
> How to use it? Launch msfconsole and typical usage would be:
>
> db_create
> load openvas
> openvas_connect user pass localhost 9390 ok
> openvas_help
>
> Take a look at openvas_scan command as it is major feature. It automatically 
> scans given targets, imports results into metasploit db and can 
> automatically launch autopwn - All in one command. 
>
> Note that it uses OMP protocol. Therefore, you should specify OpenVAS manager
> port to connect to. It does not support (deprecated) OTP protocol (i.e.
> connecting directly to scanner daemon - openvassd).
>
> Note that it can be used as text console interface to OpenVAS (with all the 
> fancy stuff Metasploit offers - like command completion).
>
> As it is first public release, could be there are some bugs - let me know!
Thanks for the contribution...it's great.

when I run db_create it says that it is missing the driver. Which db
does it use (sqlite3, mysql, postgresql)? how do you load the driver?

Thanks.

Michelangelo


More information about the Openvas-devel mailing list