- Add validated mitre_attack frontmatter to all 754 skills (286 distinct
techniques), verified against MITRE ATT&CK v19.1 via the official
mitreattack-python library: 0 revoked, deprecated, or invalid IDs
- Curate precise per-skill technique IDs for forensics, malware-analysis,
threat-intel, and red-team skills (e.g. DCSync -> T1003.006,
Kerberoasting -> T1558.003, Pass-the-Ticket -> T1550.003)
- Reconcile v19.1 tactic restructuring: Defense Evasion split into
Stealth (TA0005) and Defense Impairment (TA0112); revoked T1562.*
family and T1070.001/.002 remapped to active equivalents (T1685.*)
- Normalize word-split tags across 35 skills (remove filename-derived
stopword tags, add semantic cybersecurity tags)
- Add api-reference.md for 3 skills that were missing it
- Update README ATT&CK section with accurate v19.1 tactic distribution
Deploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.
cybersecurity
vulnerability-management
openvas
greenbone
vulnerability-scanning
gmp
python-gvm
vulnerability-management
compliance
1.0
mahipal
Apache-2.0
ID.RA-01
ID.RA-02
ID.IM-02
ID.RA-06
T1190
T1203
T1068
T1046
Implementing Vulnerability Management with Greenbone
Overview
Greenbone Vulnerability Management (GVM) is the open-source framework behind OpenVAS, providing comprehensive vulnerability scanning with over 100,000 Network Vulnerability Tests (NVTs). The python-gvm library provides a Python API to interact with GVM through the Greenbone Management Protocol (GMP), enabling programmatic creation of scan targets, task management, scan execution, and report retrieval. This skill covers connecting to GVM via Unix socket or TLS, authenticating, creating scan configs and targets, launching scans, and parsing XML-based vulnerability reports to produce actionable findings.
When to Use
When deploying or configuring implementing vulnerability management with greenbone capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation
Prerequisites
Greenbone Community Edition or Greenbone Enterprise Appliance installed
Python 3.9+ with python-gvm (pip install python-gvm)
GMP access credentials (username/password)
Network connectivity to GVM daemon (Unix socket or TCP/TLS)
Understanding of CVSS scoring and vulnerability classification
Steps
Install python-gvm: pip install python-gvm
Establish a GMP connection via UnixSocketConnection or TLSConnection
Authenticate with gmp.authenticate(username, password)
Create a target with gmp.create_target(name, hosts=[...], port_list_id=...)
Create a scan task with gmp.create_task(name, config_id, target_id, scanner_id)
Start the scan with gmp.start_task(task_id)
Monitor scan progress with gmp.get_task(task_id)
Retrieve results with gmp.get_report(report_id, report_format_id=...)
Parse the XML report for vulnerabilities, CVSS scores, and affected hosts
Generate a JSON summary report with severity distribution and remediation priorities
Expected Output
A JSON report containing total vulnerabilities found, severity breakdown (critical/high/medium/low), per-host findings with CVE references and CVSS scores, and scan metadata including duration and NVT feed version.
mukul975
cb8d79e068