[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AFMRN95NTDY6EPN2509GAP":3,"skill-same:01M6AFMRN95NTDY6EPN2509GAP":122},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":36,"linkOnly":37,"markdownContent":38,"markdownBody":39,"frontMatter":40,"refName":55,"commitSha":56,"skillDirectory":57,"forksCount":58,"repositoryHtmlUrl":59,"repositoryHomepageUrl":60,"ownerHtmlUrl":61,"ownerBlogUrl":62,"ownerDescription":63,"updatedAt":64,"install":65,"resources":78},"01M6AFMRN95NTDY6EPN2509GAP","performing-authenticated-scan-with-openvas",null,"Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS\u002FGreenbone Vulnerability Management (GVM) with SSH, SMB, or ESXi credentials to detect local vulnerabilities, missing patches, and misconfigurations on target hosts. Use when a host-level scan needs to log into systems for deep inspection, since authenticated scans typically surface 10-50x more findings than unauthenticated scans.","mukul975\u002FAnthropic-Cybersecurity-Skills","mukul975","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F42860185?v=4","01M6ADEQR8T5M4EEG6C67BQCWF","Mahipal","01M6ADJPMYWG1E5GM1FWBE3128",35990,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35],"openvas","performing authenticated scan with openvas","vulnerabilities","vulnerability management","network","network-security","vulnerability-management","vulnerability-scanning","security","smb","t1003","greenbone","ssh","gvm","authenticated-scan","credentialed-scan","cybersecurity","2026-11-10 10:12:30",false,"---\nname: performing-authenticated-scan-with-openvas\ndescription: Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS\u002FGreenbone\n  Vulnerability Management (GVM) with SSH, SMB, or ESXi credentials to detect local\n  vulnerabilities, missing patches, and misconfigurations on target hosts. Use when\n  a host-level scan needs to log into systems for deep inspection, since authenticated\n  scans typically surface 10-50x more findings than unauthenticated scans.\ndomain: cybersecurity\nsubdomain: vulnerability-management\ntags:\n- openvas\n- gvm\n- authenticated-scan\n- vulnerability-scanning\n- greenbone\n- network-security\n- credentialed-scan\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- ID.RA-01\n- ID.RA-02\n- ID.IM-02\n- ID.RA-06\nmitre_attack:\n- T1190\n- T1203\n- T1068\n- T1003\n- T1110\n---\n\n# Performing Authenticated Scan with OpenVAS\n\n## Overview\n\nOpenVAS (Open Vulnerability Assessment Scanner) is the scanner component of the Greenbone Vulnerability Management (GVM) framework. Authenticated scans use valid credentials (SSH for Linux, SMB for Windows, ESXi for VMware) to log into target systems, enabling detection of local vulnerabilities, missing patches, and misconfigurations that unauthenticated scans cannot identify. Authenticated scans typically find 10-50x more vulnerabilities than unauthenticated scans.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing authenticated scan with openvas\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- GVM 22.x+ installed (gvmd, openvas-scanner, gsad, ospd-openvas)\n- PostgreSQL database configured for gvmd\n- Redis configured for openvas-scanner\n- NVT feed synchronized (greenbone-nvt-sync or greenbone-feed-sync)\n- SSH credentials for Linux targets or SMB credentials for Windows targets\n- Network access to target hosts on scan ports\n\n## Installation\n\n### Install GVM on Kali Linux \u002F Debian\n```bash\n# Install GVM package\nsudo apt update && sudo apt install -y gvm\n\n# Run initial setup (creates admin account, syncs feeds)\nsudo gvm-setup\n\n# Check installation status\nsudo gvm-check-setup\n\n# Start all GVM services\nsudo gvm-start\n\n# Access Greenbone Security Assistant at https:\u002F\u002F127.0.0.1:9392\n```\n\n### Install via Docker (Recommended for Production)\n```bash\n# Pull Greenbone Community Edition containers\ndocker pull greenbone\u002Fgvm:stable\n\n# Run with docker-compose\ncurl -fsSL https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F_static\u002Fdocker-compose-22.4.yml \\\n  -o docker-compose.yml\n\n# Start the stack\ndocker compose -f docker-compose.yml -p greenbone-community-edition up -d\n\n# Wait for feed sync (initial sync takes 15-30 minutes)\ndocker compose -f docker-compose.yml -p greenbone-community-edition \\\n  logs -f gvmd 2>&1 | grep -i \"feed\"\n```\n\n## Configuring Credentials\n\n### SSH Credentials for Linux Targets\n```bash\n# Using gvm-cli to create SSH credential with key-based auth\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Linux SSH Key\u003C\u002Fname>\n    \u003Ctype>usk\u003C\u002Ftype>\n    \u003Clogin>scan_user\u003C\u002Flogin>\n    \u003Ckey>\n      \u003Cprivate>\u003C![CDATA['\"$(cat \u002Fhome\u002Fscan_user\u002F.ssh\u002Fid_rsa)\"']]>\u003C\u002Fprivate>\n      \u003Cphrase>key_passphrase\u003C\u002Fphrase>\n    \u003C\u002Fkey>\n  \u003C\u002Fcreate_credential>'\n\n# SSH credential with password authentication\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Linux SSH Password\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>scan_user\u003C\u002Flogin>\n    \u003Cpassword>scan_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n### SMB Credentials for Windows Targets\n```bash\n# Create SMB credential for Windows authenticated scanning\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Windows SMB Cred\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>DOMAIN\\scan_account\u003C\u002Flogin>\n    \u003Cpassword>smb_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n### ESXi Credentials\n```bash\n# Create ESXi credential for VMware host scanning\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>ESXi Root\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>root\u003C\u002Flogin>\n    \u003Cpassword>esxi_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n## Creating Scan Targets\n\n```bash\n# Create target with SSH credential (Linux hosts)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_target>\n    \u003Cname>Linux Production Servers\u003C\u002Fname>\n    \u003Chosts>192.168.1.10,192.168.1.11,192.168.1.12\u003C\u002Fhosts>\n    \u003Cport_list id=\"33d0cd82-57c6-11e1-8ed1-406186ea4fc5\"\u002F>\n    \u003Cssh_credential id=\"CREDENTIAL_UUID_HERE\">\n      \u003Cport>22\u003C\u002Fport>\n    \u003C\u002Fssh_credential>\n    \u003Calive_test>ICMP, TCP-ACK Service and ARP Ping\u003C\u002Falive_test>\n  \u003C\u002Fcreate_target>'\n\n# Create target with SMB credential (Windows hosts)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_target>\n    \u003Cname>Windows Domain Controllers\u003C\u002Fname>\n    \u003Chosts>192.168.1.20,192.168.1.21\u003C\u002Fhosts>\n    \u003Cport_list id=\"33d0cd82-57c6-11e1-8ed1-406186ea4fc5\"\u002F>\n    \u003Csmb_credential id=\"SMB_CREDENTIAL_UUID_HERE\"\u002F>\n    \u003Calive_test>ICMP, TCP-ACK Service and ARP Ping\u003C\u002Falive_test>\n  \u003C\u002Fcreate_target>'\n```\n\n## Scan Configuration\n\n### Built-in Scan Configs\n| Config Name | OID | Use Case |\n|------------|-----|----------|\n| Full and fast | daba56c8-73ec-11df-a475-002264764cea | Standard production scan |\n| Full and deep | 708f25c4-7489-11df-8094-002264764cea | Thorough scan, may be disruptive |\n| System Discovery | 8715c877-47a0-438d-98a3-27c7a6ab2196 | Host and service enumeration |\n\n### Create Custom Scan Config for Authenticated Scan\n```bash\n# Clone \"Full and fast\" config and customize\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_config>\n    \u003Ccopy>daba56c8-73ec-11df-a475-002264764cea\u003C\u002Fcopy>\n    \u003Cname>Authenticated Full Scan\u003C\u002Fname>\n  \u003C\u002Fcreate_config>'\n```\n\n## Running the Scan\n\n### Create and Start Scan Task\n```bash\n# Create scan task\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_task>\n    \u003Cname>Weekly Authenticated Scan - Linux Prod\u003C\u002Fname>\n    \u003Cconfig id=\"CONFIG_UUID\"\u002F>\n    \u003Ctarget id=\"TARGET_UUID\"\u002F>\n    \u003Cscanner id=\"08b69003-5fc2-4037-a479-93b440211c73\"\u002F>\n  \u003C\u002Fcreate_task>'\n\n# Start the scan task\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cstart_task task_id=\"TASK_UUID\"\u002F>'\n\n# Check scan progress\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_tasks task_id=\"TASK_UUID\"\u002F>'\n```\n\n### Schedule Recurring Scans\n```bash\n# Create weekly schedule (every Sunday at 2:00 AM UTC)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_schedule>\n    \u003Cname>Weekly Sunday 2AM\u003C\u002Fname>\n    \u003Cicalendar>\nBEGIN:VCALENDAR\nVERSION:2.0\nBEGIN:VEVENT\nDTSTART:20240101T020000Z\nRRULE:FREQ=WEEKLY;BYDAY=SU\nDURATION:PT12H\nEND:VEVENT\nEND:VCALENDAR\n    \u003C\u002Ficalendar>\n    \u003Ctimezone>UTC\u003C\u002Ftimezone>\n  \u003C\u002Fcreate_schedule>'\n```\n\n## Exporting Results\n\n```bash\n# Export scan report as XML\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_reports report_id=\"REPORT_UUID\" format_id=\"a994b278-1f62-11e1-96ac-406186ea4fc5\"\u002F>'\n\n# Export as CSV\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_reports report_id=\"REPORT_UUID\" format_id=\"c1645568-627a-11e3-a660-406186ea4fc5\"\u002F>'\n\n# Use python-gvm for programmatic access\npython3 -c \"\nfrom gvm.connections import UnixSocketConnection\nfrom gvm.protocols.gmp import Gmp\nfrom gvm.transforms import EtreeCheckCommandTransform\n\nconnection = UnixSocketConnection(path='\u002Frun\u002Fgvmd\u002Fgvmd.sock')\ntransform = EtreeCheckCommandTransform()\nwith Gmp(connection=connection, transform=transform) as gmp:\n    gmp.authenticate('admin', 'password')\n    reports = gmp.get_reports()\n    print(f'Total reports: {len(reports)}')\n\"\n```\n\n## Validating Authentication Success\n\n```bash\n# Check if credentials were accepted during scan\n# In the scan report, look for NVT \"Authentication tests\" results:\n# - OID 1.3.6.1.4.1.25623.1.0.103591 (SSH authentication successful)\n# - OID 1.3.6.1.4.1.25623.1.0.90023 (SMB authentication successful)\n\n# Verify via gvm-cli\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_results filter=\"name=SSH rows=10 sort-reverse=severity\"\u002F>'\n```\n\n## References\n\n- [OpenVAS Official Site](https:\u002F\u002Fwww.openvas.org\u002F)\n- [Greenbone Community Edition Docs](https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F)\n- [GVM GitHub Repository](https:\u002F\u002Fgithub.com\u002Fgreenbone\u002Fopenvas-scanner)\n- [python-gvm Library](https:\u002F\u002Fgithub.com\u002Fgreenbone\u002Fpython-gvm)\n- [GVM Docker Deployment](https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F22.4\u002Fcontainer\u002F)\n","# Performing Authenticated Scan with OpenVAS\n\n## Overview\n\nOpenVAS (Open Vulnerability Assessment Scanner) is the scanner component of the Greenbone Vulnerability Management (GVM) framework. Authenticated scans use valid credentials (SSH for Linux, SMB for Windows, ESXi for VMware) to log into target systems, enabling detection of local vulnerabilities, missing patches, and misconfigurations that unauthenticated scans cannot identify. Authenticated scans typically find 10-50x more vulnerabilities than unauthenticated scans.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing authenticated scan with openvas\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- GVM 22.x+ installed (gvmd, openvas-scanner, gsad, ospd-openvas)\n- PostgreSQL database configured for gvmd\n- Redis configured for openvas-scanner\n- NVT feed synchronized (greenbone-nvt-sync or greenbone-feed-sync)\n- SSH credentials for Linux targets or SMB credentials for Windows targets\n- Network access to target hosts on scan ports\n\n## Installation\n\n### Install GVM on Kali Linux \u002F Debian\n```bash\n# Install GVM package\nsudo apt update && sudo apt install -y gvm\n\n# Run initial setup (creates admin account, syncs feeds)\nsudo gvm-setup\n\n# Check installation status\nsudo gvm-check-setup\n\n# Start all GVM services\nsudo gvm-start\n\n# Access Greenbone Security Assistant at https:\u002F\u002F127.0.0.1:9392\n```\n\n### Install via Docker (Recommended for Production)\n```bash\n# Pull Greenbone Community Edition containers\ndocker pull greenbone\u002Fgvm:stable\n\n# Run with docker-compose\ncurl -fsSL https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F_static\u002Fdocker-compose-22.4.yml \\\n  -o docker-compose.yml\n\n# Start the stack\ndocker compose -f docker-compose.yml -p greenbone-community-edition up -d\n\n# Wait for feed sync (initial sync takes 15-30 minutes)\ndocker compose -f docker-compose.yml -p greenbone-community-edition \\\n  logs -f gvmd 2>&1 | grep -i \"feed\"\n```\n\n## Configuring Credentials\n\n### SSH Credentials for Linux Targets\n```bash\n# Using gvm-cli to create SSH credential with key-based auth\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Linux SSH Key\u003C\u002Fname>\n    \u003Ctype>usk\u003C\u002Ftype>\n    \u003Clogin>scan_user\u003C\u002Flogin>\n    \u003Ckey>\n      \u003Cprivate>\u003C![CDATA['\"$(cat \u002Fhome\u002Fscan_user\u002F.ssh\u002Fid_rsa)\"']]>\u003C\u002Fprivate>\n      \u003Cphrase>key_passphrase\u003C\u002Fphrase>\n    \u003C\u002Fkey>\n  \u003C\u002Fcreate_credential>'\n\n# SSH credential with password authentication\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Linux SSH Password\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>scan_user\u003C\u002Flogin>\n    \u003Cpassword>scan_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n### SMB Credentials for Windows Targets\n```bash\n# Create SMB credential for Windows authenticated scanning\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Windows SMB Cred\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>DOMAIN\\scan_account\u003C\u002Flogin>\n    \u003Cpassword>smb_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n### ESXi Credentials\n```bash\n# Create ESXi credential for VMware host scanning\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>ESXi Root\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>root\u003C\u002Flogin>\n    \u003Cpassword>esxi_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n## Creating Scan Targets\n\n```bash\n# Create target with SSH credential (Linux hosts)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_target>\n    \u003Cname>Linux Production Servers\u003C\u002Fname>\n    \u003Chosts>192.168.1.10,192.168.1.11,192.168.1.12\u003C\u002Fhosts>\n    \u003Cport_list id=\"33d0cd82-57c6-11e1-8ed1-406186ea4fc5\"\u002F>\n    \u003Cssh_credential id=\"CREDENTIAL_UUID_HERE\">\n      \u003Cport>22\u003C\u002Fport>\n    \u003C\u002Fssh_credential>\n    \u003Calive_test>ICMP, TCP-ACK Service and ARP Ping\u003C\u002Falive_test>\n  \u003C\u002Fcreate_target>'\n\n# Create target with SMB credential (Windows hosts)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_target>\n    \u003Cname>Windows Domain Controllers\u003C\u002Fname>\n    \u003Chosts>192.168.1.20,192.168.1.21\u003C\u002Fhosts>\n    \u003Cport_list id=\"33d0cd82-57c6-11e1-8ed1-406186ea4fc5\"\u002F>\n    \u003Csmb_credential id=\"SMB_CREDENTIAL_UUID_HERE\"\u002F>\n    \u003Calive_test>ICMP, TCP-ACK Service and ARP Ping\u003C\u002Falive_test>\n  \u003C\u002Fcreate_target>'\n```\n\n## Scan Configuration\n\n### Built-in Scan Configs\n| Config Name | OID | Use Case |\n|------------|-----|----------|\n| Full and fast | daba56c8-73ec-11df-a475-002264764cea | Standard production scan |\n| Full and deep | 708f25c4-7489-11df-8094-002264764cea | Thorough scan, may be disruptive |\n| System Discovery | 8715c877-47a0-438d-98a3-27c7a6ab2196 | Host and service enumeration |\n\n### Create Custom Scan Config for Authenticated Scan\n```bash\n# Clone \"Full and fast\" config and customize\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_config>\n    \u003Ccopy>daba56c8-73ec-11df-a475-002264764cea\u003C\u002Fcopy>\n    \u003Cname>Authenticated Full Scan\u003C\u002Fname>\n  \u003C\u002Fcreate_config>'\n```\n\n## Running the Scan\n\n### Create and Start Scan Task\n```bash\n# Create scan task\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_task>\n    \u003Cname>Weekly Authenticated Scan - Linux Prod\u003C\u002Fname>\n    \u003Cconfig id=\"CONFIG_UUID\"\u002F>\n    \u003Ctarget id=\"TARGET_UUID\"\u002F>\n    \u003Cscanner id=\"08b69003-5fc2-4037-a479-93b440211c73\"\u002F>\n  \u003C\u002Fcreate_task>'\n\n# Start the scan task\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cstart_task task_id=\"TASK_UUID\"\u002F>'\n\n# Check scan progress\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_tasks task_id=\"TASK_UUID\"\u002F>'\n```\n\n### Schedule Recurring Scans\n```bash\n# Create weekly schedule (every Sunday at 2:00 AM UTC)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_schedule>\n    \u003Cname>Weekly Sunday 2AM\u003C\u002Fname>\n    \u003Cicalendar>\nBEGIN:VCALENDAR\nVERSION:2.0\nBEGIN:VEVENT\nDTSTART:20240101T020000Z\nRRULE:FREQ=WEEKLY;BYDAY=SU\nDURATION:PT12H\nEND:VEVENT\nEND:VCALENDAR\n    \u003C\u002Ficalendar>\n    \u003Ctimezone>UTC\u003C\u002Ftimezone>\n  \u003C\u002Fcreate_schedule>'\n```\n\n## Exporting Results\n\n```bash\n# Export scan report as XML\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_reports report_id=\"REPORT_UUID\" format_id=\"a994b278-1f62-11e1-96ac-406186ea4fc5\"\u002F>'\n\n# Export as CSV\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_reports report_id=\"REPORT_UUID\" format_id=\"c1645568-627a-11e3-a660-406186ea4fc5\"\u002F>'\n\n# Use python-gvm for programmatic access\npython3 -c \"\nfrom gvm.connections import UnixSocketConnection\nfrom gvm.protocols.gmp import Gmp\nfrom gvm.transforms import EtreeCheckCommandTransform\n\nconnection = UnixSocketConnection(path='\u002Frun\u002Fgvmd\u002Fgvmd.sock')\ntransform = EtreeCheckCommandTransform()\nwith Gmp(connection=connection, transform=transform) as gmp:\n    gmp.authenticate('admin', 'password')\n    reports = gmp.get_reports()\n    print(f'Total reports: {len(reports)}')\n\"\n```\n\n## Validating Authentication Success\n\n```bash\n# Check if credentials were accepted during scan\n# In the scan report, look for NVT \"Authentication tests\" results:\n# - OID 1.3.6.1.4.1.25623.1.0.103591 (SSH authentication successful)\n# - OID 1.3.6.1.4.1.25623.1.0.90023 (SMB authentication successful)\n\n# Verify via gvm-cli\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_results filter=\"name=SSH rows=10 sort-reverse=severity\"\u002F>'\n```\n\n## References\n\n- [OpenVAS Official Site](https:\u002F\u002Fwww.openvas.org\u002F)\n- [Greenbone Community Edition Docs](https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F)\n- [GVM GitHub Repository](https:\u002F\u002Fgithub.com\u002Fgreenbone\u002Fopenvas-scanner)\n- [python-gvm Library](https:\u002F\u002Fgithub.com\u002Fgreenbone\u002Fpython-gvm)\n- [GVM Docker Deployment](https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F22.4\u002Fcontainer\u002F)\n",{"name":5,"tags":41,"author":42,"domain":35,"license":15,"version":43,"nist_csf":44,"subdomain":25,"description":7,"mitre_attack":49},[19,32,33,26,30,24,34],"mahipal","1.0",[45,46,47,48],"ID.RA-01","ID.RA-02","ID.IM-02","ID.RA-06",[50,51,52,53,54],"T1190","T1203","T1068","T1003","T1110","main","54a798831d2266a3ca61ce68a7acb80b81160d57","skills\u002Fperforming-authenticated-scan-with-openvas",4395,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills","https:\u002F\u002Fmahipal.engineer\u002FAnthropic-Cybersecurity-Skills\u002F","https:\u002F\u002Fgithub.com\u002Fmukul975","Mahipal.engineer","🔐 Cybersecurity | 💻 Dev | 📷 Street Photographer\r\n🎓 MSc | 📚 Research & AI Security","2026-08-31 12:32:44",{"source":8,"skillName":5,"commands":66,"prompt":76,"zipAvailable":77},[67,70,73],{"tool":68,"command":69},"npx","npx skills add mukul975\u002FAnthropic-Cybersecurity-Skills --skill performing-authenticated-scan-with-openvas",{"tool":71,"command":72},"bunx","bunx skills add mukul975\u002FAnthropic-Cybersecurity-Skills --skill performing-authenticated-scan-with-openvas",{"tool":74,"command":75},"pnpm","pnpm dlx skills add mukul975\u002FAnthropic-Cybersecurity-Skills --skill performing-authenticated-scan-with-openvas","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002FSKILL.md",true,[79,85,90,96,100,104,110,114,118],{"path":80,"resourceType":81,"resourceTypeDesc":82,"sizeBytes":83,"sourceHtmlUrl":84},"assets\u002Ftemplate.md","ASSET","资产文件",2355,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Fassets\u002Ftemplate.md",{"path":86,"resourceType":86,"resourceTypeDesc":87,"sizeBytes":88,"sourceHtmlUrl":89},"LICENSE","许可证",11255,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002FLICENSE",{"path":91,"resourceType":92,"resourceTypeDesc":93,"sizeBytes":94,"sourceHtmlUrl":95},"references\u002Fapi-reference.md","REFERENCE","参考文档",2246,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Freferences\u002Fapi-reference.md",{"path":97,"resourceType":92,"resourceTypeDesc":93,"sizeBytes":98,"sourceHtmlUrl":99},"references\u002Fstandards.md",2997,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Freferences\u002Fstandards.md",{"path":101,"resourceType":92,"resourceTypeDesc":93,"sizeBytes":102,"sourceHtmlUrl":103},"references\u002Fworkflows.md",3169,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Freferences\u002Fworkflows.md",{"path":105,"resourceType":106,"resourceTypeDesc":107,"sizeBytes":108,"sourceHtmlUrl":109},"scripts\u002Fagent.py","SCRIPT","脚本",7840,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Fscripts\u002Fagent.py",{"path":111,"resourceType":106,"resourceTypeDesc":107,"sizeBytes":112,"sourceHtmlUrl":113},"scripts\u002Fprocess.py",9713,"https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Fscripts\u002Fprocess.py",{"path":115,"resourceType":92,"resourceTypeDesc":93,"sizeBytes":116,"sourceHtmlUrl":117},"templates\u002Fadr-template.md",5356,"https:\u002F\u002Fgithub.com\u002Fshengdabai\u002FTony-Claude-Code-Skills\u002Fblob\u002Fmain\u002Fskills\u002Frsmdt-the-startup\u002Fplugins\u002Fteam\u002Fskills\u002Fdevelopment\u002Ftechnical-writing\u002Ftemplates\u002Fadr-template.md",{"path":119,"resourceType":92,"resourceTypeDesc":93,"sizeBytes":120,"sourceHtmlUrl":121},"templates\u002Fsystem-doc-template.md",11721,"https:\u002F\u002Fgithub.com\u002Fshengdabai\u002FTony-Claude-Code-Skills\u002Fblob\u002Fmain\u002Fskills\u002Frsmdt-the-startup\u002Fplugins\u002Fteam\u002Fskills\u002Fdevelopment\u002Ftechnical-writing\u002Ftemplates\u002Fsystem-doc-template.md",[123,153,177,205,231,255],{"skillNo":124,"name":125,"nameZh":6,"description":126,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":127,"categories":128,"keywords":134,"publishedAt":36},"01M6AGDM3HJXTKXX15ZZ0ZVCJ3","verifying-build-provenance-with-slsa-sigstore","Verifies artifact signatures and SLSA provenance using Sigstore's cosign (verify, verify-attestation, verify-blob-attestation) and slsa-verifier (verify-artifact), enforcing keyless OIDC builder identity and source repo against SLSA Build levels. Use in CI\u002FCD before deploying artifacts, when consuming third-party attestations, establishing a SLSA Build L3 pipeline, or confirming provenance during incident response or admission control.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fverifying-build-provenance-with-slsa-sigstore\u002FSKILL.md",[129],{"categoryNo":130,"categoryName":131,"taxonomyType":132,"taxonomyTypeDesc":133},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[135,136,137,138,27,35,139,140,141,142,143,144,145,146,147,148,149,150,151,152],"sigstore","provenance","slsa","verifying build provenance with slsa sigstore","incident response","identity","pr","code","artifacts","ci","supply-chain","pipeline","supply-chain-security","t1195","attestation","code-signing","cosign","keyless",{"skillNo":154,"name":155,"nameZh":6,"description":156,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":157,"categories":158,"keywords":160,"publishedAt":36},"01M6AGDGBPWYVZ2F11GFKJ4HZ9","validating-tpm-measured-boot-attestation","Verifies TPM 2.0 measured-boot integrity and remote attestation with tpm2-tools -- reading PCRs (tpm2_pcrread), replaying the boot event log, generating and checking signed quotes (tpm2_quote\u002Ftpm2_checkquote), and sealing secrets to a PCR policy. Use to confirm a system booted trusted firmware\u002Fkernel for Zero Trust device posture, detect boot-chain tampering via PCR drift, or build a golden-value baseline for fleet attestation.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fvalidating-tpm-measured-boot-attestation\u002FSKILL.md",[159],{"categoryNo":130,"categoryName":131,"taxonomyType":132,"taxonomyTypeDesc":133},[161,149,162,163,27,164,35,141,165,166,167,168,169,170,171,172,173,174,175,176],"boot","TPM","validating tpm measured boot attestation","policy","verification","ZeRO","firmware","Tools","measured-boot","PCR","integrity","secrets","remote-attestation","tpm2-tools","integrity-verification","trusted-computing",{"skillNo":178,"name":179,"nameZh":6,"description":180,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":181,"categories":182,"keywords":187,"publishedAt":36},"01M6AGDCW0Y4FXZ3362GT1941M","validating-backup-integrity-for-recovery","Validates backup integrity through cryptographic hash verification, automated restore testing, corruption detection, and recoverability checks to confirm backups are reliable for disaster recovery and ransomware response. Use before relying on backups for recovery, when building post-backup validation pipelines, auditing backup infrastructure for compliance, or checking immutable\u002Fair-gapped backups for silent corruption or tampering.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Fvalidating-backup-integrity-for-recovery\u002FSKILL.md",[183,186],{"categoryNo":184,"categoryName":185,"taxonomyType":132,"taxonomyTypeDesc":133},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":130,"categoryName":131,"taxonomyType":132,"taxonomyTypeDesc":133},[171,188,189,190,191,35,192,193,165,194,195,196,197,198,199,200,201,202,203,204],"backup","recovery","validating backup integrity for recovery","testing","infrastructure","validation","compliance","hash-verification","incident-response","ransomware","cryptocurrency","detection","t1078","t1490","immutable","disaster-recovery","restore-testing",{"skillNo":206,"name":207,"nameZh":6,"description":208,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":209,"categories":210,"keywords":212,"publishedAt":36},"01M6AGD9GBG2KZ336AE763J3WH","triaging-windows-with-kape","Runs KAPE (Kroll Artifact Parser and Extractor) to collect targeted forensic artifacts (registry hives, $MFT, event logs, prefetch, browser data) via Targets and parse them with Modules wrapping Eric Zimmerman's EZ Tools (PECmd, MFTECmd, RECmd). Use during early incident containment\u002Ftriage when full disk imaging is impractical but a defensible, parseable Windows artifact set is needed quickly, including at-scale remote collection.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftriaging-windows-with-kape\u002FSKILL.md",[211],{"categoryNo":130,"categoryName":131,"taxonomyType":132,"taxonomyTypeDesc":133},[213,214,215,35,216,217,218,219,220,221,222,223,224,225,226,227,168,228,229,230],"windows","kape","triaging windows with kape","registry","browser","logs","windows-forensics","dfir","mft","mftecmd","data","prefetch","eric-zimmerman","digital-forensics","SET","collection","pecmd","artifact-collection",{"skillNo":232,"name":233,"nameZh":6,"description":234,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":235,"categories":236,"keywords":238,"publishedAt":36},"01M6AGD5PW5J4EVZM958WD74ZQ","triaging-vulnerabilities-with-ssvc-framework","Triages and prioritizes vulnerabilities with CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree, weighing exploitation status (via the CISA KEV catalog and FIRST EPSS API), technical impact, automatability, and mission prevalence to output Track\u002FTrack*\u002FAttend\u002FAct decisions. Use when prioritizing vulnerability scan results (OpenVAS, Nessus, Qualys) for remediation planning beyond raw CVSS scores.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftriaging-vulnerabilities-with-ssvc-framework\u002FSKILL.md",[237],{"categoryNo":130,"categoryName":131,"taxonomyType":132,"taxonomyTypeDesc":133},[21,239,240,35,241,242,243,25,244,245,246,19,247,248,249,250,251,252,253,254],"framework","triaging vulnerabilities with ssvc framework","status","planning","CISA","risk-management","nessus","qualys","cvss","remediation","risk","vulnerability","api","prioritization","ssvc","decision-tree",{"skillNo":256,"name":257,"nameZh":6,"description":258,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":259,"categories":260,"keywords":262,"publishedAt":36},"01M6AGD24TTQQM4CXG69E3B9TJ","triaging-security-incident","Performs initial triage of security incidents using the NIST SP 800-61r3 and SANS PICERL frameworks, classifying incident type, assigning priority by business impact, and routing to the appropriate response team. Use when a SIEM\u002FEDR alert needs human classification, concurrent alerts must be prioritized, or a user report or threat-intel IOC match requires initial incident categorization.","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\u002Fblob\u002Fmain\u002Fskills\u002Ftriaging-security-incident\u002FSKILL.md",[261],{"categoryNo":130,"categoryName":131,"taxonomyType":132,"taxonomyTypeDesc":133},[27,263,35,264,265,266,267,268,269,270,271,200,272,201,273,274,275,276,277,278],"triaging security incident","siem","file","ioc","soc","NIST-800-61","NIST","severity","edr","execution","analysis","classification","severity-classification","incident-triage","SANS-PICERL","SOC-operations"]