Wednesday, April 10, 2019


Once you have OpenVas in a Docker Container you have a way to operate from a Windows 10 OS and still do what you need to do as far as scanning. The rest of this page is from the Docker Hub.

atomicorp/openvas
By atomicorp • Updated 9 months ago
OpenVAS Container for Docker

Openvas Docker container

This container is based on Centos 7 for FIPS-140-2 compliance. It is a self contained Openvas Scanner with web console on port 443.

Launchdocker run -d -p 443:443 --name openvas atomicorp/openvas https:/// Default login / password: admin / admin


Launch with a Volumedocker volume create openvas docker run -d -p 443:443 -v openvas:/var/lib/openvas/mgr --name openvas atomicorp/openvas


Set Admin Passworddocker run -d -p 443:443 -e OV_PASSWORD=iliketurtles --name openvas atomicorp/openvas


Update NVT datadocker run -d -p 443:443 -e OV_UPDATE=yes --name openvas atomicorp/openvas


Attach to runningdocker exec -it openvas bash


Thanks Jan-Oliver Wagner @Greenbone Michael Meyer @Greenbone Everyone at Greenbone that made this project possible The Arachni Project Openvas Docker creators used as a reference: Mike Splain, William Collani, Serge Katzmann, and Daniel Popescu

Tuesday, April 02, 2019

Commando VM: The First of Its Kind Windows Offensive Distribution



Commando VM: The First of Its Kind Windows Offensive Distribution


March 28, 2019 | by Jacob Barteaux, Blaine Stancill, Nhan Huynh

For penetration testers looking for a stable and supported Linux testing platform, the industry agrees that Kali is the go-to platform. However, if you’d prefer to use Windows as an operating system, you may have noticed that a worthy platform didn’t exist. As security researchers, every one of us has probably spent hours customizing a Windows working environment at least once and we all use the same tools, utilities, and techniques during customer engagements. Therefore, maintaining a custom environment while keeping all our tool sets up-to-date can be a monotonous chore for all. Recognizing that, we have created a Windows distribution focused on supporting penetration testers and red teamers.

https://www.fireeye.com/blog/threat-research/2019/03/commando-vm-windows-offensive-distribution.html