Forum Discussion

AurelD_345900's avatar
AurelD_345900
Icon for Nimbostratus rankNimbostratus
Apr 25, 2019

Is there an attack signature for OpenVAS ?

I found attack signature for Qualys but not OpenVAS. Is there one ?   Also, is there a way to list all signatures downloaded on device ?  
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Apr 26, 2019

There is no Attack Signature for OpenVAS scanner - I just checked the latest ASM Signature update dated 2019-04-17 11:29:45.

It isn't difficult to create a user-defined signature as OpenVAS has a User-Agent string like this: 

"Mozilla/5.0 [en] (X11, U; OpenVAS 7.0.10)"
"Mozilla/5.0 [en] (X11, U; OpenVAS 8.0.9)"

so by creating a user-defined signature looking for "OpenVAS" in the header should work. It should look like this: 

headercontent:"OpenVAS";

Ideally however it is best to raise a Support Case with F5 as OpenVAS scanner signature is missing and needs to be a part of standard signatures