In Chapter 2, we set up OpenVAS for vulnerability scanning. Nmap does a great job of reporting ports and services, but lacks the ability to scan for vulnerabilities. OpenVAS will find vulnerabilities and produce a report on systems. The guys at OpenVAS update their vulnerability list weekly, so it is best to update OpenVAS before running a scan. To do this on Kali, run the following commands from the Terminal window:
root@kalibook : ~ # OpenVAS-nvt-sync
This will run vulnerability updates for OpenVAS. The first time you run it, you will see the information visible in the following screenshot, asking you to migrate to using Rsync to update the vulnerabilities. Type Y and hit the Enter key. The update will start. The first time this is run, it will take quite a while, because it has to give you the entire list of plugins and tests available. In subsequent runs of...
