All right.
Good afternoon.
We are going to do open boss today.
So we're going to start very easy concept.
The very first thing you want to do before you do anything else uh is we want to update.
So we're going to do a sudo apt get update just like that and let it do its thing.
Uh, and the reason we want to do is we want to get the latest information available to us for running
up for running open.
Boss, I can't talk this morning.
All right.
Once we've done an update, we want to do an upgrade.
And, yes, go through its process.
And this will just take a minute.
All right.
Once it's done that one we want to actually do a sudo apt.
Where to do a dist Dash upgrade.
And then we'll do a tacky that sucker in there.
It's going to go through and again start upgrading the distribution system.
Okay.
And once that is being done updating we're going to do a sudo and then apt install open boss.
Just like that.
And of course a y to get that sucker in there.
And again this is going to take a few minutes to go through its process.
All right.
Once that's done our next one is a sudo and then gvm dash setup or tac setup.
And it's going to start going through the process of setting everything up.
This will take again a few minutes.
It could take a long time.
So be prepared for a little bit of a wait.
Okay so that took probably about 40 minutes.
So the next thing we need to do is we actually need to provide a new password.
So I'm actually going to run a command called sudo g U v m d and then dash dash or tac tac.
User equals admin.
So that's going to change our user ID to admin.
And then I'm going to do a new password.
So new tac tac new tac password.
And I'm going to make that just admin.
So it's going to be username is admin and password is admin.
So admin admin uh and then we can go through there and tore my password.
There we go.
So we've got a new password set up for us.
Now we just need to do a check.
So we're going to do sudo gv MD and then I'm sorry tac check tac setup.
This is going to check to make sure there is no issues with it.
And then everything's running the way it's supposed to.
Uh oh it's JVM not GV MD you know it's going to run a check on it to make sure everything is working
the way it's supposed to.
All right.
Everything's good.
So this setup is complete.
Now set up.
An installation is now complete.
So now we're actually going to use the tool.
All right.
Once we've created that username and password with the admin user we should copy and paste that new
password into our system.
The reason I do that is because if you don't, you could easily find yourself in a week or even two
weeks where you can't remember the password.
And that's an issue, right?
So we're going to go to settings.
And then I'm going to go right into now this is this is VirtualBox.
Right.
So we're going to go right into description.
And you can see here I've got my open boss admin is my username.
And then I just put a slash with my password right there.
And then I can copy that password and utilize that within my system.
So let's go back into Kali.
We're going to go back into Kali.
And at the top left hand side you should see that little Kali icon right up there.
Applications.
We're going to click on that.
And I'm just going to type in G VM.
Now I want to do a check setup first.
So I'm going to do a VM JVM check setup.
It's going to ask for the password.
I'm going to type that in.
I'm going to blow it up so you can see what's going on here.
And it's literally just going to go through and make sure that there's no issue.
If there are issues, you may need to troubleshoot and figure out what's going on.
So you can see here after a few minutes it says JVM.
It seems like JVM 23 .11.0 installation is okay.
So now let's actually start JVM.
I'm going to shut that down.
Let me get rid of this terminal.
We don't need that anymore.
On the top left hand side you're going to see that little Kali icon.
We'll click on that.
We're going to type in JVM.
And then we're going to do start right here.
This is going to start our JVM services for use.
Let me blow this up a little bit for you.
And you can see here there's the IP address right here.
If after a few minutes it doesn't automatically kick into Firefox, you can right click on that and
then open link.
You can see however that mine is working properly.
It's going open to open the web UI.
And here we go.
So to make sure that it works, I'm going to type in admin.
Probably help if I spelled it right.
Let's try admin.
And then I'm going to paste in that password right there and sign in.
Okay.
And that is installation.
We can see that everything is installed correctly.
It's working.
Let me don't save that.
You can save it if you want because it's a lab environment.
But normally something I wouldn't do.
And this is our dashboard.
Next thing we want to do is create a simple scan.
Now I've got two running in the background.
You can see it here.
It's running now.
It doesn't have to be a key object to obviously you can use any machine that you would like.
I'm going to go to scan Tasks right there.
From there I'm going to press that little magic wand task wizard.
And you can see here that we can perform a quick scan.
Now, if you remember correctly, we know that Archaeopteryx two is running on 10.0.2.5, at least on
my machine.
Your machine may be different and I'm just going to start that scan.
It's going to go through and start requesting that scan.
And you can see here that it's been requested providing one report, but it hasn't provided any output
yet.
The first scan usually takes the longest.
Okay.
So we're just going to wait for it.
Okay.
You can see here after I think about 15 minutes, it looks like we have our scan completed for an immediate
scan of the Archaeopteryx two.
Now we can see here that we have a severity of high on there.
We can also see the last report date, the number of reports available, uh, and so on and so forth.
We're just going to click on reports right here for number one.
And it's going to open it up for us.
And we're just going to tell us we have three high 17 medium three low 44 log events uh and zero known
false positives.
If I click on the actual task right there, you can see here that it opens up a process.
And if we scroll down a little bit we can see that the scan took 13 minutes.
So I wasn't that off I wasn't that off.
But you can see user tags not available and if there are any permissions available as well.
So it provides us some of that issue or some of that information right off the bat.
We can also see the maximums currently scanned hosts is 20 so on and so forth.
We can see the scan was configured as full and fast using the Openvos default scanning parameters.
All right.
At the very top right hand side we can see total reports.
We can see at the very top over here uh task immediate scan results.
If I click on that, we can start to see what's going on with our actual scan.
Uh, now it lists it like this, but I'm going to click severity twice, and that will identify it by
the severity of the different problems that we're seeing.
You can see at the very top we have a 10.0.
It's going to be our highest.
And we can see the operating system has reached its end of life detection.
If I want to know more about that, I can click on that and it will tell me that the operating system
on the remote host has reached its end of life and should not be used anymore.
We can see the different aspects of it.
It'll even tell us some more information.
If we scroll down, we can see the impact end of life version operating system, and it gives us a lot
of good details on what's going on with that.
If I click it again, it cascades it back up.
Let's look at deprecated SSH one protocol here we can see that a summary of the host is running SSH
and is providing accepting more than one deprecated versions of SSH.
The detection result is the service providing.
Accepting the following versions.
We go down some more.
We can see that it's deprecated SSH protocol detection and it gives us the version number.
We can see the affected software and services.
The impact.
Successful exploitation could allow remote attackers to bypass security restrictions and obtain a client's
public host key during connection attempt, and use it to open and authenticate an SSH session to another
server with the same access solution type is vendor fix.
Reconfigure the SSH server to provide only and accept SSH protocol version SSH two.
So it provides that information and then the different references associated with it.
If I click on CVE 2001 0361, let's open up that in a new tab.
You can see that it provides us the base score.
And it goes into the process of what calculated the difference score.
We can also see, um, the references associated with it, the vulnerable products and the Mvt's addressing
the CVE.
Let's close that out.
So this is openvas from a very, very quick down and dirty layer that provides you a lot of great information.
I would recommend going through and scanning a few things.
Go through the different reports for your exam.
You might see a screenshot that looks something like this that asks you to identify how many criticals,
how many majors, how many minors Uh, or, you know, high medium lows.
You might also see something that asks you specifically about one of the, uh, specific vulnerabilities
that was detected.
You might get a scenario that asks you specifically, uh, Paul was searching for a Or Paul has been
assigned a, um, problem related to SSL.
Which of the listed vulnerabilities would you most likely, uh, aim to, uh, identify or work first?
And your choices, obviously, if you went through and you looked at it would be this one right here
because it's rated to 7.4, not the 7.5, because that has to do with SSH.
And this one is at a live detection.
So you would literally look at SSL, uh, those types of questions, those scenario based questions
I wouldn't rule out.
Uh, I wouldn't rule out questions asking you, you know, which which location is associated with it
or what port number.
And again, that would be over here.
Okay.
So this is open, boss.
And you should be good to go.
As always.
It's been a pleasure.