Shulou(Shulou.com)06/01 Report--

This article mainly introduces how to install and use Vuls, has a certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, the following let the editor take you to understand it.

Vuls is a vulnerability scanner for Linux / FreeBSD, no agent, written in golang.

Install dependent component yum-y install sqlite git gc wget gcc1 download install golangwget https://storage.googleapis.com/golang/go1.10.linux-amd64.tar.gztar-C / usr/local-xzf go1.10.linux-amd64.tar.gz12 set go home directory and environment variable mkdir $HOME/gosudo sh-c 'cat / etc/profile.d/goenv.shexport GOROOT=/usr/local/goexport GOPATH=$HOME/goexport PATH=$PATH:$GOROOT/bin:$GOPATH/binEOF'source / etc/profile.d / goenv.sh2234567 create log directory sudo mkdir / var/log/vuls1

The following steps need to connect to the google server. If you cannot access the google server directly, you need to set http_proxy and https_proxy in advance.

Export http_proxy=x.x.x.x:abcdexport https_proxy=x.x.x.x:abcd12 download and install go-cve-dictionarygo get github.com/kotakanbe/go-cve-dictionary1

If go-cve-dictionary is not automatically compiled and installed, you need to compile and install manually

Cd $GOPATH/src/github.com/kotakanbe/go-cve-dictionarymake install12 download and install vulnerability database cd $HOMEfor i in `seq 2002 $(date + "% Y") `; do go-cve-dictionary fetchnvd-years $I; done12

This step takes a long time, about dozens of minutes, and depends on the speed of the network.

Download and install goval-dictionarygo get github.com/kotakanbe/goval-dictionary1

If goval-dictionary is not automatically compiled and installed, you need to compile and install manually. You can see the goval-dictionary executable file in the $GOPATH/bin directory.

Cd $GOPATH/src/github.com/kotakanbe/goval-dictionarymake install12 get CentOS database goval-dictionary fetch-redhat 71 download and install Vulsgo get github.com/future-architect/vuls1

If vuls is not automatically compiled and installed, you need to compile and install manually. You can see the vuls executable file in the $GOPATH/bin directory.

Cd $GOPATH/src/github.com/future-architect/vulsmake install12 configure ssh password-free login

When scanning, you need to be able to log in to the scanned server through ssh password-free login from the scanning server. Ssh password-free configuration needs to be configured on both servers. Send each server's respective public key to the other server. -generate RSA key pairs. This step does not require special assignment, press enter three times to confirm the completion.

Ssh-keygen-t rsa1 copies the key to the other server cd $HOME/.ssh/ssh-copy-id-I id_rsa.pub x.x.x.x12 to create the vuls scan configuration file config.toml in the $HOME directory, as follows

Users take root as an example

[servers] [servers.x-x-x-x] host = "x.x.x.x" port = "22" user = "root" keyPath = "/ root/.ssh/id_rsa" [servers.y.y.y.y] host = "y.y.y.y" port = "22" user = "root" keyPath = "/ root/.ssh/id_rsa" 12345678910111213 launch go-cve-dictionary service go-cve-dictionary server1vuls configuration test vuls configtest-config=/root/ Config.toml1vuls scan vuls scan1 for full report vuls report-format-full-text1

Thank you for reading this article carefully. I hope the article "how to install and use Vuls" shared by the editor will be helpful to you. At the same time, I also hope you will support us and pay attention to the industry information channel. More related knowledge is waiting for you to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.