Dictionary · Ethical Hacking Tools
OpenVAS
Vulnerability scanning · Intermediate
An open-source vulnerability scanner maintained under the Greenbone project. It compares an authorized host with a feed of known checks and reports what matched.
It automates a large checklist against systems you are allowed to scan. A report is the start of patching and verification, not a list of things to try on other networks.
Example: A weekly internal scan flags a missing browser update. The finding is matched to an advisory and handed to patching.
Git in the Zone explains security tools and attack terminology so you can recognize them and defend against them. Practice only on systems you own or have written permission to test. Nothing on this site runs a command or an exploit.
What it is for
Run a feed of known checks against hosts you are allowed to scan.
Authorized use: Use it only on systems you own or have written permission to test. Git in the Zone explains the tool; it does not launch it.
Operating systems: Typically deployed on Linux, with a web interface for the results.
Language you will see
- scan feed
- finding
- severity
How to read the options
- Scan feed: The updated list of checks. An old feed misses new flaws and may repeat stale ones.
- Severity: The scanner's ranking. It is a starting point, not a substitute for your own impact judgment.
Common misconception
- A scanner match can be wrong or already mitigated. Someone still has to confirm the finding.