Implementing Vulnerability Management with Greenbone
Overview
Greenbone Vulnerability Management (GVM) is the open-source framework behind OpenVAS, providing comprehensive vulnerability scanning with over 100,000 Network Vulnerability Tests (NVTs). The python-gvm library provides a Python API to interact with GVM through the Greenbone Management Protocol (GMP), enabling programmatic creation of scan targets, task management, scan execution, and report retrieval. This skill covers connecting to GVM via Unix socket or TLS, authenticating, creating scan configs and targets, launching scans, and parsing XML-based vulnerability reports to produce actionable findings.
When to Use
- When deploying or configuring implementing vulnerability management with greenbone capabilities in your environment
- When establishing security controls aligned to compliance requirements
- When building or improving security architecture for this domain
- When conducting security assessments that require this implementation
Prerequisites
- Greenbone Community Edition or Greenbone Enterprise Appliance installed
- Python 3.9+ with
python-gvm (pip install python-gvm)
- GMP access credentials (username/password)
- Network connectivity to GVM daemon (Unix socket or TCP/TLS)
- Understanding of CVSS scoring and vulnerability classification
Steps
- Install python-gvm:
pip install python-gvm
- Establish a GMP connection via
UnixSocketConnection or TLSConnection
- Authenticate with
gmp.authenticate(username, password)
- Create a target with
gmp.create_target(name, hosts=[...], port_list_id=...)
- Create a scan task with
gmp.create_task(name, config_id, target_id, scanner_id)
- Start the scan with
gmp.start_task(task_id)
- Monitor scan progress with
gmp.get_task(task_id)
- Retrieve results with
gmp.get_report(report_id, report_format_id=...)
- Parse the XML report for vulnerabilities, CVSS scores, and affected hosts
- Generate a JSON summary report with severity distribution and remediation priorities
Expected Output
A JSON report containing total vulnerabilities found, severity breakdown (critical/high/medium/low), per-host findings with CVE references and CVSS scores, and scan metadata including duration and NVT feed version.
1---2name: implementing-vulnerability-management-with-greenbone3description: Deploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.4license: Apache-2.05---6# Implementing Vulnerability Management with Greenbone
7
8## Overview
9
10Greenbone Vulnerability Management (GVM) is the open-source framework behind OpenVAS, providing comprehensive vulnerability scanning with over 100,000 Network Vulnerability Tests (NVTs). The python-gvm library provides a Python API to interact with GVM through the Greenbone Management Protocol (GMP), enabling programmatic creation of scan targets, task management, scan execution, and report retrieval. This skill covers connecting to GVM via Unix socket or TLS, authenticating, creating scan configs and targets, launching scans, and parsing XML-based vulnerability reports to produce actionable findings.
11
12
13## When to Use
14
15- When deploying or configuring implementing vulnerability management with greenbone capabilities in your environment
16- When establishing security controls aligned to compliance requirements
17- When building or improving security architecture for this domain
18- When conducting security assessments that require this implementation
19
20## Prerequisites
21
22- Greenbone Community Edition or Greenbone Enterprise Appliance installed
23- Python 3.9+ with `python-gvm` (`pip install python-gvm`)
24- GMP access credentials (username/password)
25- Network connectivity to GVM daemon (Unix socket or TCP/TLS)
26- Understanding of CVSS scoring and vulnerability classification
27
28## Steps
29
301. Install python-gvm: `pip install python-gvm`
312. Establish a GMP connection via `UnixSocketConnection` or `TLSConnection`
323. Authenticate with `gmp.authenticate(username, password)`
334. Create a target with `gmp.create_target(name, hosts=[...], port_list_id=...)`
345. Create a scan task with `gmp.create_task(name, config_id, target_id, scanner_id)`
356. Start the scan with `gmp.start_task(task_id)`
367. Monitor scan progress with `gmp.get_task(task_id)`
378. Retrieve results with `gmp.get_report(report_id, report_format_id=...)`
389. Parse the XML report for vulnerabilities, CVSS scores, and affected hosts
3910. Generate a JSON summary report with severity distribution and remediation priorities
40
41## Expected Output
42
43A JSON report containing total vulnerabilities found, severity breakdown (critical/high/medium/low), per-host findings with CVE references and CVSS scores, and scan metadata including duration and NVT feed version.
theheavenlyd3mon