When i was attending the CISA Federal Defense Skilling Academy Boot camp to obtain my Sec+ Cert, they had preconfigured VMs like this for log Analysis. We briefly touched on OpenVas, Snort, Green Bone.. ect. Because as with all boot camps you only have a few months to prepare you for the exam.. which for us was the Sec+. We ran our first scan to see what "Normal" looks like. After a few attempts at attacking our target machine we then went back to see what evil looks like . This was One of the best lessons that i learned during that course.. its hard to find evil if you dont know what normal looks like on your network. On that note, i always wanted to create my own home lab in just the same fashion but struggled to find decent tutorials that put it all together in just the same fashion as CISA (what i was familiar with). You sir have done an excellent job here. Cant wait to see you attack the machine to expose the evil log files for review.
Thank you, the “attack & review” is extremely valuable. In fact, I’ve created a couple project series on this channel to illustrate that! Again, super valuable and thank you for sharing ❤️
Fantastic video! Thorough and straight forward as usual. I did run into an issue when I got towards the end and my "Feed Status" wouldn't update. It would just show the following: "NVT is 3 days old & SCAP, CERT, and GVMD_DATA are all "Update in progress.." Any advice how to get them to update?
@@MyDFIR I have waited since my original response about 3 days ago and still nothing. I have a relatively new PC (a few years old now) so I can't believe it's an issue with outdated hardware. Not a huge deal, but it would be nice if it worked. I appreciate the response! Keep up the great work! :)
@MyDFIR This video on Metasploitable2 and OpenVas was incredibly informative and well-presented! Thanks for creating such valuable content. I recently configured OpenVas on DigitalOcean and am attempting to perform internal network pentesting for a client. However, I'm encountering issues with port forwarding, which is limiting its full capabilities. Additionally, I'm on a VPN, which complicates things further. Do you have any suggestions for a better approach to resolve these issues? Thanks in advance!
Thanks! Is this black box testing? Part of me thinks its not since you are port forwarding because if it isnt, it would be easier to spin up openvas inside the network as it is an internal network pentest.
@@MyDFIR It is grey box testing and they have just given me VPN access for accessing their internal network but a lot of scanning tools aren't that reliable when on VPN. So I was wondering as I am not going to client's location as of now so in mean time what else can be done when we talk about Internal Network pentesting on VPN? Are they special tools that give better results when doing pentesting on VPN?
Take a look at this video, it will explain the different networking options which can help you setup an isolated machine. Cybersecurity Tip: Build A Basic Home Lab (2/3) ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-5iafC6vj7kM.html
