As an exercise for this chapter, we will be running a vulnerability scan, using the free scanner from OpenVAS (http://www.openvas.org/). We are going to scan a deliberately vulnerable system, Metasploitable, downloadable as a live CD from https://sourceforge.net/projects/metasploitable/.
Metasploitable is an intentionally vulnerable Linux virtual machine. The VM can be used to conduct security training, test security tools, and practice common penetration testing techniques. Simply download the zipped file, extract its contents, and open the VM in VMware workstation or VirtualBox.
Never expose this VM to an untrusted network.
For this exercise, we will need to add the OpenVAS scanner to the Kali virtual machine. So, ...
