Vulnerability Analysis With OpenVAS

Item: Vulnerability Analysis With OpenVAS
Rating: 4
Author: PostSingularity Institute

by HackerSploit · View the channel on PSI

Applied Sciences & Engineering Computing & Cybersecurity UTComputer networking and communications UTNNetwork security

🎙 HackerSploit 👥 1.0M 📅 September 2, 2018 ⏱ 16 min 👁 182K 📄 tutorial 🧭 2026-10-10

Available in: English (current) Français

Keywords

OpenVASvulnerability analysisvulnerability scanMetasploitcybersecurity

Summary

HackerSploit’s tutorial covers vulnerability analysis using OpenVAS, an open-source vulnerability scanner. The video begins with a brief reminder to install and configure OpenVAS, then logs in and provides an overview of the dashboard, tasks, and reporting sections. The main demonstration involves creating a new scan task for a Metasploitable 2 virtual machine, configuring the target IP, selecting a scan configuration (full and fast), and starting the scan. After the scan completes, the video shows how to interpret the results, listing vulnerabilities by severity and explaining key details like CVSS scores, affected services, and mitigation advice. Specific vulnerabilities highlighted include an SSH brute-force login, a distcc remote code execution, and a vsftpd backdoor. The tutorial then demonstrates how to export the scan report as XML and import it into the Metasploit framework using the db_import command, enabling efficient access to discovered vulnerabilities for exploitation. The video concludes by emphasizing the importance of vulnerability analysis for both security professionals and ethical hackers, positioning it as a fundamental step in the penetration testing process.

171 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides practical, hands-on value by guiding the viewer through a full vulnerability scan workflow with OpenVAS. The argumentation is strong for a tutorial: the author explains not only how to perform actions but also why each step is relevant, such as the rationale behind choosing ‘full and fast’ scan configuration and the importance of understanding severity ratings and quality of detection. The demonstration is realistic, including troubleshooting when OpenVAS becomes unresponsive, which adds authenticity. The argumentation is straightforward and clearly structured, making the content easy to follow for viewers with basic knowledge of networking and security. No deep theoretical analysis is presented, but the focus on actionable steps and result interpretation fulfills the tutorial’s purpose effectively.

Scientific Rigor, Source Quality, Title Accuracy

Scientific rigor is moderate: the video is based on standard tools and known practices in vulnerability assessment. The author does not cite external sources or research papers, but references well-known frameworks like Metasploit and explains vulnerabilities with reference to CVE codes. The description contains links to the channel’s website and courses, which are promotional, but no external scientific references are provided. The title accurately matches the content, which is a focused tutorial on using OpenVAS for vulnerability analysis. The video does not make exaggerated claims; it clearly states the limitations and settings. The comments from viewers are overwhelmingly positive, indicating that the content met expectations and was helpful for learning purposes.

244 words

Title / Content Match

The title accurately reflects the content: a step-by-step demonstration of vulnerability scanning and analysis using OpenVAS.

Quality & Reliability

8/10

The tutorial is clear, practical, and follows a logical workflow. The author demonstrates the entire process with a real target (Metasploitable 2) and explains each step, providing recommendations on scan configuration and interpretation of results. No references to external sources are given, but the content is consistent with standard vulnerability assessment practices.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

HackerSploit Website — Official website of the channel, mentioned in the description
HackerSploit Android App — Mobile app for the channel's content
Udemy Course: The Complete Deep Web Course 2018 — Promoted course in the description

External References

nordvpn.org

Contribution & Novelties

The video’s original contribution lies in its clear, step-by-step walkthrough of using OpenVAS as a free alternative to commercial scanners like Nessus, and its integration with Metasploit. It bridges the gap between scanning and exploitation by showing how to import results directly into a penetration testing workflow. This is particularly useful for beginners looking to understand the practical application of vulnerability analysis in a hands-on context.

Pour aller plus loin :

OpenVAS (Greenbone) — Official site of the OpenVAS project, now part of Greenbone Security Manager; provides documentation and downloads.
Metasploit Framework — Official page of the Metasploit penetration testing framework used in the video.
Common Vulnerabilities and Exposures (CVE) — Central database of publicly disclosed vulnerabilities, referenced in the scan results for CVE codes.

125 words

Radar Profile

The profile indicates high technical quality and reliability, with slightly lower but still solid quantity of information. The video is well-balanced for a tutorial: it provides sufficient detail without overwhelming the viewer, and the practical focus outweighs theoretical depth.

Reliability 8/10

💬 Très positif. Sur les 30 commentaires analysés, la grande majorité exprime des remerciements et des éloges, beaucoup soulignant la clarté et l'utilité du tutoriel, et certains demandant des vidéos supplémentaires.