update qualysapi to latest + PR and refactored vulnwhisperer qualys module to qualys-web (#108)
* update qualysapi to latest + PR and refactored vulnwhisperer qualys module to qualys-web * changing config template paths for qualys * Update frameworks_example.ini Will leave for now qualys local folder as "qualys" instead of changing to one for each module, as like this it will still be compatible with the current logstash and we will be able to update master to drop the qualysapi fork once the new version is uploaded to PyPI repository. PR from qualysapi repo has already been merged, so the only missing is the upload to PyPI.
This commit is contained in:
Quim Montal
committed by
Austin Taylor
Austin Taylor
parent
9383c12495
commit
b7d6d6207f
113
deps/qualysapi/examples/qualysapi-section-example.py
vendored
Normal file
113
deps/qualysapi/examples/qualysapi-section-example.py
vendored
Normal file
@ -0,0 +1,113 @@
|
||||
__author__ = 'Parag Baxi <parag.baxi@gmail.com>'
|
||||
__license__ = 'Apache License 2.0'
|
||||
|
||||
import qualysapi
|
||||
from lxml import objectify
|
||||
from lxml.builder import E
|
||||
|
||||
# Setup connection to QualysGuard API.
|
||||
qgc = qualysapi.connect('config.txt', 'qualys_vuln')
|
||||
#
|
||||
# API v1 call: Scan the New York & Las Vegas asset groups
|
||||
# The call is our request's first parameter.
|
||||
call = 'scan.php'
|
||||
# The parameters to append to the url is our request's second parameter.
|
||||
parameters = {'scan_title': 'Go big or go home', 'asset_groups': 'New York&Las Vegas', 'option': 'Initial+Options'}
|
||||
# Note qualysapi will automatically convert spaces into plus signs for API v1 & v2.
|
||||
# Let's call the API and store the result in xml_output.
|
||||
xml_output = qgc.request(call, parameters, concurrent_scans_retries=2, concurrent_scans_retry_delay=600)
|
||||
# concurrent_retries: Retry the call this many times if your subscription hits the concurrent scans limit.
|
||||
# concurrent_retries: Delay in seconds between retrying when subscription hits the concurrent scans limit.
|
||||
# Example XML response when this happens below:
|
||||
# <?xml version="1.0" encoding="UTF-8"?>
|
||||
# <ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://localhost:50205/qps/rest/app//xsd/3.0/was/wasscan.xsd">
|
||||
# <responseCode>INVALID_REQUEST</responseCode>
|
||||
# <responseErrorDetails>
|
||||
# <errorMessage>You have reached the maximum number of concurrent running scans (10) for your account</errorMessage>
|
||||
# <errorResolution>Please wait until your previous scans have completed</errorResolution>
|
||||
# </responseErrorDetails>
|
||||
#
|
||||
print(xml_output)
|
||||
#
|
||||
# API v1 call: Print out all IPs associated with asset group "Looneyville Texas".
|
||||
# Note that the question mark at the end is optional.
|
||||
call = 'asset_group_list.php?'
|
||||
# We can still use strings for the data (not recommended).
|
||||
parameters = 'title=Looneyville Texas'
|
||||
# Let's call the API and store the result in xml_output.
|
||||
xml_output = qgc.request(call, parameters)
|
||||
# Let's objectify the xml_output string.
|
||||
root = objectify.fromstring(xml_output)
|
||||
# Print out the IPs.
|
||||
print(root.ASSET_GROUP.SCANIPS.IP.text)
|
||||
# Prints out:
|
||||
# 10.0.0.102
|
||||
#
|
||||
# API v2 call: Print out DNS name for a range of IPs.
|
||||
call = '/api/2.0/fo/asset/host/'
|
||||
parameters = {'action': 'list', 'ips': '10.0.0.10-10.0.0.11'}
|
||||
xml_output = qgc.request(call, parameters)
|
||||
root = objectify.fromstring(xml_output)
|
||||
# Iterate hosts and print out DNS name.
|
||||
for host in root.RESPONSE.HOST_LIST.HOST:
|
||||
print(host.IP.text, host.DNS.text)
|
||||
# Prints out:
|
||||
# 10.0.0.10 mydns1.qualys.com
|
||||
# 10.0.0.11 mydns2.qualys.com
|
||||
#
|
||||
# API v3 WAS call: Print out number of webapps.
|
||||
call = '/count/was/webapp'
|
||||
# Note that this call does not have a payload so we don't send any data parameters.
|
||||
xml_output = qgc.request(call)
|
||||
root = objectify.fromstring(xml_output)
|
||||
# Print out count of webapps.
|
||||
print(root.count.text)
|
||||
# Prints out:
|
||||
# 89
|
||||
#
|
||||
# API v3 WAS call: Print out number of webapps containing title 'Supafly'.
|
||||
call = '/count/was/webapp'
|
||||
# We can send a string XML for the data.
|
||||
parameters = '<ServiceRequest><filters><Criteria operator="CONTAINS" field="name">Supafly</Criteria></filters></ServiceRequest>'
|
||||
xml_output = qgc.request(call, parameters)
|
||||
root = objectify.fromstring(xml_output)
|
||||
# Print out count of webapps.
|
||||
print(root.count.text)
|
||||
# Prints out:
|
||||
# 3
|
||||
#
|
||||
# API v3 WAS call: Print out number of webapps containing title 'Lightsabertooth Tiger'.
|
||||
call = '/count/was/webapp'
|
||||
# We can also send an lxml.builder E object.
|
||||
parameters = (
|
||||
E.ServiceRequest(
|
||||
E.filters(
|
||||
E.Criteria('Lightsabertooth Tiger', field='name',operator='CONTAINS'))))
|
||||
xml_output = qgc.request(call, parameters)
|
||||
root = objectify.fromstring(xml_output)
|
||||
# Print out count of webapps.
|
||||
print(root.count.text)
|
||||
# Prints out:
|
||||
# 0
|
||||
# Too bad, because that is an awesome webapp name!
|
||||
#
|
||||
# API v3 Asset Management call: Count tags.
|
||||
call = '/count/am/tag'
|
||||
xml_output = qgc.request(call)
|
||||
root = objectify.fromstring(xml_output)
|
||||
# We can use XPATH to find the count.
|
||||
print(root.xpath('count')[0].text)
|
||||
# Prints out:
|
||||
# 840
|
||||
#
|
||||
# API v3 Asset Management call: Find asset by name.
|
||||
call = '/search/am/tag'
|
||||
parameters = '''<ServiceRequest>
|
||||
<preferences>
|
||||
<limitResults>10</limitResults>
|
||||
</preferences>
|
||||
<filters>
|
||||
<Criteria field="name" operator="CONTAINS">PB</Criteria>
|
||||
</filters>
|
||||
</ServiceRequest>'''
|
||||
xml_output = qgc.request(call, parameters)
|
||||
Reference in New Issue
Block a user