[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M7DBB6HBY5EQ8JCZAASJB71K":3,"skill-same:01M7DBB6HBY5EQ8JCZAASJB71K":105},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":16,"sourceHtmlUrl":17,"categories":18,"keywords":19,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":23,"frontMatter":24,"refName":48,"commitSha":49,"skillDirectory":50,"forksCount":51,"repositoryHtmlUrl":52,"repositoryHomepageUrl":6,"ownerHtmlUrl":53,"ownerBlogUrl":54,"ownerDescription":55,"updatedAt":56,"install":57,"resources":70},"01M7DBB6HBY5EQ8JCZAASJB71K","performing-authenticated-scan-with-openvas",null,"Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS\u002FGreenbone Vulnerability Management (GVM) with SSH, SMB, or ESXi credentials to detect local vulnerabilities, missing patches, and misconfigurations on target hosts. Use when a host-level scan needs to log into systems for deep inspection, since authenticated scans typically surface 10-50x more findings than unauthenticated scans.","SaiVatsal\u002FSkills-I-Use","SaiVatsal","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F242597752?v=4","01M7D5YM1T4VXW9203M0GFAHZ1","SaiVatsalPolimera","01M7D5YM2D61ST39XVR2V7B7ZJ",3,"Apache-2.0","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\nname: performing-authenticated-scan-with-openvas\ndescription: Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS\u002FGreenbone\n  Vulnerability Management (GVM) with SSH, SMB, or ESXi credentials to detect local\n  vulnerabilities, missing patches, and misconfigurations on target hosts. Use when\n  a host-level scan needs to log into systems for deep inspection, since authenticated\n  scans typically surface 10-50x more findings than unauthenticated scans.\ndomain: cybersecurity\nsubdomain: vulnerability-management\ntags:\n- openvas\n- gvm\n- authenticated-scan\n- vulnerability-scanning\n- greenbone\n- network-security\n- credentialed-scan\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- ID.RA-01\n- ID.RA-02\n- ID.IM-02\n- ID.RA-06\nmitre_attack:\n- T1190\n- T1203\n- T1068\n- T1003\n- T1110\n---\n\n# Performing Authenticated Scan with OpenVAS\n\n## Overview\n\nOpenVAS (Open Vulnerability Assessment Scanner) is the scanner component of the Greenbone Vulnerability Management (GVM) framework. Authenticated scans use valid credentials (SSH for Linux, SMB for Windows, ESXi for VMware) to log into target systems, enabling detection of local vulnerabilities, missing patches, and misconfigurations that unauthenticated scans cannot identify. Authenticated scans typically find 10-50x more vulnerabilities than unauthenticated scans.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing authenticated scan with openvas\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- GVM 22.x+ installed (gvmd, openvas-scanner, gsad, ospd-openvas)\n- PostgreSQL database configured for gvmd\n- Redis configured for openvas-scanner\n- NVT feed synchronized (greenbone-nvt-sync or greenbone-feed-sync)\n- SSH credentials for Linux targets or SMB credentials for Windows targets\n- Network access to target hosts on scan ports\n\n## Installation\n\n### Install GVM on Kali Linux \u002F Debian\n```bash\n# Install GVM package\nsudo apt update && sudo apt install -y gvm\n\n# Run initial setup (creates admin account, syncs feeds)\nsudo gvm-setup\n\n# Check installation status\nsudo gvm-check-setup\n\n# Start all GVM services\nsudo gvm-start\n\n# Access Greenbone Security Assistant at https:\u002F\u002F127.0.0.1:9392\n```\n\n### Install via Docker (Recommended for Production)\n```bash\n# Pull Greenbone Community Edition containers\ndocker pull greenbone\u002Fgvm:stable\n\n# Run with docker-compose\ncurl -fsSL https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F_static\u002Fdocker-compose-22.4.yml \\\n  -o docker-compose.yml\n\n# Start the stack\ndocker compose -f docker-compose.yml -p greenbone-community-edition up -d\n\n# Wait for feed sync (initial sync takes 15-30 minutes)\ndocker compose -f docker-compose.yml -p greenbone-community-edition \\\n  logs -f gvmd 2>&1 | grep -i \"feed\"\n```\n\n## Configuring Credentials\n\n### SSH Credentials for Linux Targets\n```bash\n# Using gvm-cli to create SSH credential with key-based auth\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Linux SSH Key\u003C\u002Fname>\n    \u003Ctype>usk\u003C\u002Ftype>\n    \u003Clogin>scan_user\u003C\u002Flogin>\n    \u003Ckey>\n      \u003Cprivate>\u003C![CDATA['\"$(cat \u002Fhome\u002Fscan_user\u002F.ssh\u002Fid_rsa)\"']]>\u003C\u002Fprivate>\n      \u003Cphrase>key_passphrase\u003C\u002Fphrase>\n    \u003C\u002Fkey>\n  \u003C\u002Fcreate_credential>'\n\n# SSH credential with password authentication\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Linux SSH Password\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>scan_user\u003C\u002Flogin>\n    \u003Cpassword>scan_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n### SMB Credentials for Windows Targets\n```bash\n# Create SMB credential for Windows authenticated scanning\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Windows SMB Cred\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>DOMAIN\\scan_account\u003C\u002Flogin>\n    \u003Cpassword>smb_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n### ESXi Credentials\n```bash\n# Create ESXi credential for VMware host scanning\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>ESXi Root\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>root\u003C\u002Flogin>\n    \u003Cpassword>esxi_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n## Creating Scan Targets\n\n```bash\n# Create target with SSH credential (Linux hosts)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_target>\n    \u003Cname>Linux Production Servers\u003C\u002Fname>\n    \u003Chosts>192.168.1.10,192.168.1.11,192.168.1.12\u003C\u002Fhosts>\n    \u003Cport_list id=\"33d0cd82-57c6-11e1-8ed1-406186ea4fc5\"\u002F>\n    \u003Cssh_credential id=\"CREDENTIAL_UUID_HERE\">\n      \u003Cport>22\u003C\u002Fport>\n    \u003C\u002Fssh_credential>\n    \u003Calive_test>ICMP, TCP-ACK Service and ARP Ping\u003C\u002Falive_test>\n  \u003C\u002Fcreate_target>'\n\n# Create target with SMB credential (Windows hosts)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_target>\n    \u003Cname>Windows Domain Controllers\u003C\u002Fname>\n    \u003Chosts>192.168.1.20,192.168.1.21\u003C\u002Fhosts>\n    \u003Cport_list id=\"33d0cd82-57c6-11e1-8ed1-406186ea4fc5\"\u002F>\n    \u003Csmb_credential id=\"SMB_CREDENTIAL_UUID_HERE\"\u002F>\n    \u003Calive_test>ICMP, TCP-ACK Service and ARP Ping\u003C\u002Falive_test>\n  \u003C\u002Fcreate_target>'\n```\n\n## Scan Configuration\n\n### Built-in Scan Configs\n| Config Name | OID | Use Case |\n|------------|-----|----------|\n| Full and fast | daba56c8-73ec-11df-a475-002264764cea | Standard production scan |\n| Full and deep | 708f25c4-7489-11df-8094-002264764cea | Thorough scan, may be disruptive |\n| System Discovery | 8715c877-47a0-438d-98a3-27c7a6ab2196 | Host and service enumeration |\n\n### Create Custom Scan Config for Authenticated Scan\n```bash\n# Clone \"Full and fast\" config and customize\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_config>\n    \u003Ccopy>daba56c8-73ec-11df-a475-002264764cea\u003C\u002Fcopy>\n    \u003Cname>Authenticated Full Scan\u003C\u002Fname>\n  \u003C\u002Fcreate_config>'\n```\n\n## Running the Scan\n\n### Create and Start Scan Task\n```bash\n# Create scan task\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_task>\n    \u003Cname>Weekly Authenticated Scan - Linux Prod\u003C\u002Fname>\n    \u003Cconfig id=\"CONFIG_UUID\"\u002F>\n    \u003Ctarget id=\"TARGET_UUID\"\u002F>\n    \u003Cscanner id=\"08b69003-5fc2-4037-a479-93b440211c73\"\u002F>\n  \u003C\u002Fcreate_task>'\n\n# Start the scan task\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cstart_task task_id=\"TASK_UUID\"\u002F>'\n\n# Check scan progress\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_tasks task_id=\"TASK_UUID\"\u002F>'\n```\n\n### Schedule Recurring Scans\n```bash\n# Create weekly schedule (every Sunday at 2:00 AM UTC)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_schedule>\n    \u003Cname>Weekly Sunday 2AM\u003C\u002Fname>\n    \u003Cicalendar>\nBEGIN:VCALENDAR\nVERSION:2.0\nBEGIN:VEVENT\nDTSTART:20240101T020000Z\nRRULE:FREQ=WEEKLY;BYDAY=SU\nDURATION:PT12H\nEND:VEVENT\nEND:VCALENDAR\n    \u003C\u002Ficalendar>\n    \u003Ctimezone>UTC\u003C\u002Ftimezone>\n  \u003C\u002Fcreate_schedule>'\n```\n\n## Exporting Results\n\n```bash\n# Export scan report as XML\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_reports report_id=\"REPORT_UUID\" format_id=\"a994b278-1f62-11e1-96ac-406186ea4fc5\"\u002F>'\n\n# Export as CSV\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_reports report_id=\"REPORT_UUID\" format_id=\"c1645568-627a-11e3-a660-406186ea4fc5\"\u002F>'\n\n# Use python-gvm for programmatic access\npython3 -c \"\nfrom gvm.connections import UnixSocketConnection\nfrom gvm.protocols.gmp import Gmp\nfrom gvm.transforms import EtreeCheckCommandTransform\n\nconnection = UnixSocketConnection(path='\u002Frun\u002Fgvmd\u002Fgvmd.sock')\ntransform = EtreeCheckCommandTransform()\nwith Gmp(connection=connection, transform=transform) as gmp:\n    gmp.authenticate('admin', 'password')\n    reports = gmp.get_reports()\n    print(f'Total reports: {len(reports)}')\n\"\n```\n\n## Validating Authentication Success\n\n```bash\n# Check if credentials were accepted during scan\n# In the scan report, look for NVT \"Authentication tests\" results:\n# - OID 1.3.6.1.4.1.25623.1.0.103591 (SSH authentication successful)\n# - OID 1.3.6.1.4.1.25623.1.0.90023 (SMB authentication successful)\n\n# Verify via gvm-cli\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_results filter=\"name=SSH rows=10 sort-reverse=severity\"\u002F>'\n```\n\n## References\n\n- [OpenVAS Official Site](https:\u002F\u002Fwww.openvas.org\u002F)\n- [Greenbone Community Edition Docs](https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F)\n- [GVM GitHub Repository](https:\u002F\u002Fgithub.com\u002Fgreenbone\u002Fopenvas-scanner)\n- [python-gvm Library](https:\u002F\u002Fgithub.com\u002Fgreenbone\u002Fpython-gvm)\n- [GVM Docker Deployment](https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F22.4\u002Fcontainer\u002F)\n","# Performing Authenticated Scan with OpenVAS\n\n## Overview\n\nOpenVAS (Open Vulnerability Assessment Scanner) is the scanner component of the Greenbone Vulnerability Management (GVM) framework. Authenticated scans use valid credentials (SSH for Linux, SMB for Windows, ESXi for VMware) to log into target systems, enabling detection of local vulnerabilities, missing patches, and misconfigurations that unauthenticated scans cannot identify. Authenticated scans typically find 10-50x more vulnerabilities than unauthenticated scans.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing authenticated scan with openvas\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- GVM 22.x+ installed (gvmd, openvas-scanner, gsad, ospd-openvas)\n- PostgreSQL database configured for gvmd\n- Redis configured for openvas-scanner\n- NVT feed synchronized (greenbone-nvt-sync or greenbone-feed-sync)\n- SSH credentials for Linux targets or SMB credentials for Windows targets\n- Network access to target hosts on scan ports\n\n## Installation\n\n### Install GVM on Kali Linux \u002F Debian\n```bash\n# Install GVM package\nsudo apt update && sudo apt install -y gvm\n\n# Run initial setup (creates admin account, syncs feeds)\nsudo gvm-setup\n\n# Check installation status\nsudo gvm-check-setup\n\n# Start all GVM services\nsudo gvm-start\n\n# Access Greenbone Security Assistant at https:\u002F\u002F127.0.0.1:9392\n```\n\n### Install via Docker (Recommended for Production)\n```bash\n# Pull Greenbone Community Edition containers\ndocker pull greenbone\u002Fgvm:stable\n\n# Run with docker-compose\ncurl -fsSL https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F_static\u002Fdocker-compose-22.4.yml \\\n  -o docker-compose.yml\n\n# Start the stack\ndocker compose -f docker-compose.yml -p greenbone-community-edition up -d\n\n# Wait for feed sync (initial sync takes 15-30 minutes)\ndocker compose -f docker-compose.yml -p greenbone-community-edition \\\n  logs -f gvmd 2>&1 | grep -i \"feed\"\n```\n\n## Configuring Credentials\n\n### SSH Credentials for Linux Targets\n```bash\n# Using gvm-cli to create SSH credential with key-based auth\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Linux SSH Key\u003C\u002Fname>\n    \u003Ctype>usk\u003C\u002Ftype>\n    \u003Clogin>scan_user\u003C\u002Flogin>\n    \u003Ckey>\n      \u003Cprivate>\u003C![CDATA['\"$(cat \u002Fhome\u002Fscan_user\u002F.ssh\u002Fid_rsa)\"']]>\u003C\u002Fprivate>\n      \u003Cphrase>key_passphrase\u003C\u002Fphrase>\n    \u003C\u002Fkey>\n  \u003C\u002Fcreate_credential>'\n\n# SSH credential with password authentication\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Linux SSH Password\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>scan_user\u003C\u002Flogin>\n    \u003Cpassword>scan_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n### SMB Credentials for Windows Targets\n```bash\n# Create SMB credential for Windows authenticated scanning\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>Windows SMB Cred\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>DOMAIN\\scan_account\u003C\u002Flogin>\n    \u003Cpassword>smb_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n### ESXi Credentials\n```bash\n# Create ESXi credential for VMware host scanning\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_credential>\n    \u003Cname>ESXi Root\u003C\u002Fname>\n    \u003Ctype>up\u003C\u002Ftype>\n    \u003Clogin>root\u003C\u002Flogin>\n    \u003Cpassword>esxi_password_here\u003C\u002Fpassword>\n  \u003C\u002Fcreate_credential>'\n```\n\n## Creating Scan Targets\n\n```bash\n# Create target with SSH credential (Linux hosts)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_target>\n    \u003Cname>Linux Production Servers\u003C\u002Fname>\n    \u003Chosts>192.168.1.10,192.168.1.11,192.168.1.12\u003C\u002Fhosts>\n    \u003Cport_list id=\"33d0cd82-57c6-11e1-8ed1-406186ea4fc5\"\u002F>\n    \u003Cssh_credential id=\"CREDENTIAL_UUID_HERE\">\n      \u003Cport>22\u003C\u002Fport>\n    \u003C\u002Fssh_credential>\n    \u003Calive_test>ICMP, TCP-ACK Service and ARP Ping\u003C\u002Falive_test>\n  \u003C\u002Fcreate_target>'\n\n# Create target with SMB credential (Windows hosts)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_target>\n    \u003Cname>Windows Domain Controllers\u003C\u002Fname>\n    \u003Chosts>192.168.1.20,192.168.1.21\u003C\u002Fhosts>\n    \u003Cport_list id=\"33d0cd82-57c6-11e1-8ed1-406186ea4fc5\"\u002F>\n    \u003Csmb_credential id=\"SMB_CREDENTIAL_UUID_HERE\"\u002F>\n    \u003Calive_test>ICMP, TCP-ACK Service and ARP Ping\u003C\u002Falive_test>\n  \u003C\u002Fcreate_target>'\n```\n\n## Scan Configuration\n\n### Built-in Scan Configs\n| Config Name | OID | Use Case |\n|------------|-----|----------|\n| Full and fast | daba56c8-73ec-11df-a475-002264764cea | Standard production scan |\n| Full and deep | 708f25c4-7489-11df-8094-002264764cea | Thorough scan, may be disruptive |\n| System Discovery | 8715c877-47a0-438d-98a3-27c7a6ab2196 | Host and service enumeration |\n\n### Create Custom Scan Config for Authenticated Scan\n```bash\n# Clone \"Full and fast\" config and customize\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_config>\n    \u003Ccopy>daba56c8-73ec-11df-a475-002264764cea\u003C\u002Fcopy>\n    \u003Cname>Authenticated Full Scan\u003C\u002Fname>\n  \u003C\u002Fcreate_config>'\n```\n\n## Running the Scan\n\n### Create and Start Scan Task\n```bash\n# Create scan task\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_task>\n    \u003Cname>Weekly Authenticated Scan - Linux Prod\u003C\u002Fname>\n    \u003Cconfig id=\"CONFIG_UUID\"\u002F>\n    \u003Ctarget id=\"TARGET_UUID\"\u002F>\n    \u003Cscanner id=\"08b69003-5fc2-4037-a479-93b440211c73\"\u002F>\n  \u003C\u002Fcreate_task>'\n\n# Start the scan task\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cstart_task task_id=\"TASK_UUID\"\u002F>'\n\n# Check scan progress\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_tasks task_id=\"TASK_UUID\"\u002F>'\n```\n\n### Schedule Recurring Scans\n```bash\n# Create weekly schedule (every Sunday at 2:00 AM UTC)\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Ccreate_schedule>\n    \u003Cname>Weekly Sunday 2AM\u003C\u002Fname>\n    \u003Cicalendar>\nBEGIN:VCALENDAR\nVERSION:2.0\nBEGIN:VEVENT\nDTSTART:20240101T020000Z\nRRULE:FREQ=WEEKLY;BYDAY=SU\nDURATION:PT12H\nEND:VEVENT\nEND:VCALENDAR\n    \u003C\u002Ficalendar>\n    \u003Ctimezone>UTC\u003C\u002Ftimezone>\n  \u003C\u002Fcreate_schedule>'\n```\n\n## Exporting Results\n\n```bash\n# Export scan report as XML\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_reports report_id=\"REPORT_UUID\" format_id=\"a994b278-1f62-11e1-96ac-406186ea4fc5\"\u002F>'\n\n# Export as CSV\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_reports report_id=\"REPORT_UUID\" format_id=\"c1645568-627a-11e3-a660-406186ea4fc5\"\u002F>'\n\n# Use python-gvm for programmatic access\npython3 -c \"\nfrom gvm.connections import UnixSocketConnection\nfrom gvm.protocols.gmp import Gmp\nfrom gvm.transforms import EtreeCheckCommandTransform\n\nconnection = UnixSocketConnection(path='\u002Frun\u002Fgvmd\u002Fgvmd.sock')\ntransform = EtreeCheckCommandTransform()\nwith Gmp(connection=connection, transform=transform) as gmp:\n    gmp.authenticate('admin', 'password')\n    reports = gmp.get_reports()\n    print(f'Total reports: {len(reports)}')\n\"\n```\n\n## Validating Authentication Success\n\n```bash\n# Check if credentials were accepted during scan\n# In the scan report, look for NVT \"Authentication tests\" results:\n# - OID 1.3.6.1.4.1.25623.1.0.103591 (SSH authentication successful)\n# - OID 1.3.6.1.4.1.25623.1.0.90023 (SMB authentication successful)\n\n# Verify via gvm-cli\ngvm-cli socket --socketpath \u002Frun\u002Fgvmd\u002Fgvmd.sock --gmp-username admin --gmp-password \u003Cpassword> --xml \\\n  '\u003Cget_results filter=\"name=SSH rows=10 sort-reverse=severity\"\u002F>'\n```\n\n## References\n\n- [OpenVAS Official Site](https:\u002F\u002Fwww.openvas.org\u002F)\n- [Greenbone Community Edition Docs](https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F)\n- [GVM GitHub Repository](https:\u002F\u002Fgithub.com\u002Fgreenbone\u002Fopenvas-scanner)\n- [python-gvm Library](https:\u002F\u002Fgithub.com\u002Fgreenbone\u002Fpython-gvm)\n- [GVM Docker Deployment](https:\u002F\u002Fgreenbone.github.io\u002Fdocs\u002Flatest\u002F22.4\u002Fcontainer\u002F)\n",{"name":5,"tags":25,"author":33,"domain":34,"license":15,"version":35,"nist_csf":36,"subdomain":41,"description":7,"mitre_attack":42},[26,27,28,29,30,31,32],"openvas","gvm","authenticated-scan","vulnerability-scanning","greenbone","network-security","credentialed-scan","mahipal","cybersecurity","1.0",[37,38,39,40],"ID.RA-01","ID.RA-02","ID.IM-02","ID.RA-06","vulnerability-management",[43,44,45,46,47],"T1190","T1203","T1068","T1003","T1110","main","8a3b3de73262a4c4db64523949360f3c599c2fb1","Anthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas",0,"https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use","https:\u002F\u002Fgithub.com\u002FSaiVatsal","https:\u002F\u002Fsaivatsal.github.io\u002FPortfolio\u002F","The Longer It Takes The Stronger It Becomes ","2026-09-21 22:45:58",{"source":8,"skillName":5,"commands":58,"prompt":68,"zipAvailable":69},[59,62,65],{"tool":60,"command":61},"npx","npx skills add SaiVatsal\u002FSkills-I-Use --skill performing-authenticated-scan-with-openvas",{"tool":63,"command":64},"bunx","bunx skills add SaiVatsal\u002FSkills-I-Use --skill performing-authenticated-scan-with-openvas",{"tool":66,"command":67},"pnpm","pnpm dlx skills add SaiVatsal\u002FSkills-I-Use --skill performing-authenticated-scan-with-openvas","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002FSKILL.md",true,[71,77,81,87,91,95,101],{"path":72,"resourceType":73,"resourceTypeDesc":74,"sizeBytes":75,"sourceHtmlUrl":76},"assets\u002Ftemplate.md","ASSET","资产文件",2355,"https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Fassets\u002Ftemplate.md",{"path":78,"resourceType":78,"resourceTypeDesc":79,"sizeBytes":80,"sourceHtmlUrl":16},"LICENSE","许可证",11255,{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Fapi-reference.md","REFERENCE","参考文档",2246,"https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Freferences\u002Fapi-reference.md",{"path":88,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":89,"sourceHtmlUrl":90},"references\u002Fstandards.md",2997,"https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Freferences\u002Fstandards.md",{"path":92,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":93,"sourceHtmlUrl":94},"references\u002Fworkflows.md",3169,"https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Freferences\u002Fworkflows.md",{"path":96,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":99,"sourceHtmlUrl":100},"scripts\u002Fagent.py","SCRIPT","脚本",7840,"https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Fscripts\u002Fagent.py",{"path":102,"resourceType":97,"resourceTypeDesc":98,"sizeBytes":103,"sourceHtmlUrl":104},"scripts\u002Fprocess.py",9713,"https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002FAnthropic-Cybersecurity-Skills-main\u002Fskills\u002Fperforming-authenticated-scan-with-openvas\u002Fscripts\u002Fprocess.py",[106,114,122,131,138,145],{"skillNo":107,"name":108,"nameZh":6,"description":109,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":110,"sourceHtmlUrl":111,"categories":112,"keywords":113,"publishedAt":20},"01M7DJZP6E6KMBQV4CZSDPZEZ8","webapp-testing","Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fwebapp-testing\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fwebapp-testing\u002FSKILL.md",[],[],{"skillNo":115,"name":116,"nameZh":6,"description":117,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":118,"sourceHtmlUrl":119,"categories":120,"keywords":121,"publishedAt":20},"01M7DJZFTS5TS06K2TV3MDTE67","web-artifacts-builder","Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn\u002Fui). Use for complex artifacts requiring state management, routing, or shadcn\u002Fui components - not for simple single-file HTML\u002FJSX artifacts.","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fweb-artifacts-builder\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fweb-artifacts-builder\u002FSKILL.md",[],[],{"skillNo":123,"name":124,"nameZh":6,"description":125,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":126,"licenseFileUrl":127,"sourceHtmlUrl":128,"categories":129,"keywords":130,"publishedAt":20},"01M7DJRK4SRQ908F2TJM6EZ7EV","ui-styling","Create beautiful, accessible user interfaces with shadcn\u002Fui components (built on Radix UI + Tailwind), Tailwind CSS utility-first styling, and canvas-based visual designs. Use when building user interfaces, implementing design systems, creating responsive layouts, adding accessible components (dialogs, dropdowns, forms, tables), customizing themes and colors, implementing dark mode, generating visual designs and posters, or establishing consistent styling patterns across applications.","MIT","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fui-ux-pro-max-skill-main\u002Fcli\u002Fassets\u002Fskills\u002Fui-styling\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fui-ux-pro-max-skill-main\u002Fcli\u002Fassets\u002Fskills\u002Fui-styling\u002FSKILL.md",[],[],{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":126,"licenseFileUrl":6,"sourceHtmlUrl":135,"categories":136,"keywords":137,"publishedAt":20},"01M7DJR902059VEQP23PVM2WA0","design","Comprehensive design skill: brand identity, design tokens, UI styling, logo generation (55 styles, Gemini AI), corporate identity program (50 deliverables, CIP mockups), HTML presentations (Chart.js), banner design (22 styles, social\u002Fads\u002Fweb\u002Fprint), icon design (15 styles, SVG, Gemini 3.1 Pro), social photos (HTML→screenshot, multi-platform). Actions: design logo, create CIP, generate mockups, build slides, design banner, generate icon, create social photos, social media images, brand identity, design system. Platforms: Facebook, Twitter, LinkedIn, YouTube, Instagram, Pinterest, TikTok, Threads, Google Ads.","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fui-ux-pro-max-skill-main\u002Fcli\u002Fassets\u002Fskills\u002Fdesign\u002FSKILL.md",[],[],{"skillNo":139,"name":140,"nameZh":6,"description":141,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":126,"licenseFileUrl":6,"sourceHtmlUrl":142,"categories":143,"keywords":144,"publishedAt":20},"01M7DJR56QF5N6XYTCPCFHFMNP","design-system","Token architecture, component specifications, and slide generation. Three-layer tokens (primitive→semantic→component), CSS variables, spacing\u002Ftypography scales, component specs, strategic slide creation. Use for design tokens, systematic design, brand-compliant presentations.","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fui-ux-pro-max-skill-main\u002Fcli\u002Fassets\u002Fskills\u002Fdesign-system\u002FSKILL.md",[],[],{"skillNo":146,"name":147,"nameZh":6,"description":148,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":126,"licenseFileUrl":6,"sourceHtmlUrl":149,"categories":150,"keywords":151,"publishedAt":20},"01M7DJQXB6M0SFF7NX8J5N01AH","banner-design","Design banners for social media, ads, website heroes, creative assets, and print. Multiple art direction options with AI-generated visuals. Actions: design, create, generate banner. Platforms: Facebook, Twitter\u002FX, LinkedIn, YouTube, Instagram, Google Display, website hero, print. Styles: minimalist, gradient, bold typography, photo-based, illustrated, geometric, retro, glassmorphism, 3D, neon, duotone, editorial, collage. Uses ui-ux-pro-max, frontend-design, ai-artist, ai-multimodal skills.","https:\u002F\u002Fgithub.com\u002FSaiVatsal\u002FSkills-I-Use\u002Fblob\u002Fmain\u002Fui-ux-pro-max-skill-main\u002Fcli\u002Fassets\u002Fskills\u002Fbanner-design\u002FSKILL.md",[],[]]