Commit Graph

432 Commits

Author SHA1 Message Date
078bd9559e Update docker-compose.yml (#93)
increase file descriptors to allow elasticsearch to start.
1.7.1
2018-09-04 01:58:36 -04:00
258f9ae4ca Update 1000_vulnWhispererBaseVisuals.json
Update field to include keyword to prevent error: TypeError: "field" is a required parameter
2018-09-03 00:40:23 +02:00
fc5f9b5b7c Fix docker-compose logstash config (#92)
* ignore nessus requests warnings

* docker-compose fully working with vulnwhisperer integrated

* remove comments docker-compose

* documenting docker-compose

* Readme corrections

* fix after recheck everything works out of the box

* fix exits that break the no specified section execution mode

* fix docker qualysapi issue, updated README

* revert change on deps/qualysapi/qualysapi/util.py (no effect)

* temporarily changed Dockerfile link to the working one

* fix docker-compose logstash config

* permissions needed for logstash container to work

* changing default path qualys, there are no folders
2018-08-20 09:20:58 -04:00
a159d5b06f Update README.md 2018-08-19 12:03:38 -04:00
7b4202de52 Update README.md 2018-08-18 14:29:23 -04:00
8336b72314 Docker-compose fully working with vulnwhisperer integrated (#90)
* ignore nessus requests warnings

* docker-compose fully working with vulnwhisperer integrated

* remove comments docker-compose

* documenting docker-compose

* Readme corrections

* fix after recheck everything works out of the box

* fix exits that break the no specified section execution mode

* fix docker qualysapi issue, updated README

* revert change on deps/qualysapi/qualysapi/util.py (no effect)

* temporarily changed Dockerfile link to the working one
2018-08-17 08:51:28 -04:00
5b879e13c7 Silence requests warnings 2018-08-14 06:23:18 -04:00
a84576b551 No need to specify section to run (#88)
* Add Qualys vulnerability scans

* Use non-zero exit codes for failures

* Convert to strings for Logstash

* Update logstash config for vulnerability scans

* Update README

* Grab all scans statuses

* Add Qualys vulnerability scans

* Use non-zero exit codes for failures

* Convert to strings for Logstash

* Update logstash config for vulnerability scans

* Update README

* Grab all scans statuses

* Fix error: "Cannot convert non-finite values (NA or inf) to integer"

When trying to download the results of Qualys Vulnerability Management scans, the following error pops up:

[FAIL] - Could not process scan/xxxxxxxxxx.xxxxx - Cannot convert non-finite values (NA or inf) to integer

This error is due to pandas operating with the scan results json file, as the last element from the json doesn't fir with the rest of the response's scheme: that element is "target_distribution_across_scanner_appliances", which contains the scanners used and the IP ranges that each scanner went through.

Taking out the last line solves the issue.

Also adding the qualys_vuln scheme to the frameworks_example.ini

* No need to specify section to run

Until now it vulnwhisperer was not running if a section was not specified,
but there is the variable "enabled" on each module config, so now it will
check which modules are enabled and run them sequentialy.

Made mainly in order to be able to automate with docker-compose instance,
as the docker with vulnwhisperer (https://github.com/HASecuritySolutions/docker_vulnwhisperer)
has that command run at the end.

* added to readme + detectify
2018-08-09 16:39:57 -07:00
46be3c71ef example.ini is frameworks_example.ini (#77) 2018-07-06 22:18:26 -07:00
608a49d178 Update README.md 2018-07-05 13:47:22 -04:00
7f2c59f531 Qualys Vulnerability Management integration (#74)
* Add Qualys vulnerability scans

* Use non-zero exit codes for failures

* Convert to strings for Logstash

* Update logstash config for vulnerability scans

* Update README

* Grab all scans statuses

* Add Qualys vulnerability scans

* Use non-zero exit codes for failures

* Convert to strings for Logstash

* Update logstash config for vulnerability scans

* Update README

* Grab all scans statuses

* Fix error: "Cannot convert non-finite values (NA or inf) to integer"

When trying to download the results of Qualys Vulnerability Management scans, the following error pops up:

[FAIL] - Could not process scan/xxxxxxxxxx.xxxxx - Cannot convert non-finite values (NA or inf) to integer

This error is due to pandas operating with the scan results json file, as the last element from the json doesn't fir with the rest of the response's scheme: that element is "target_distribution_across_scanner_appliances", which contains the scanners used and the IP ranges that each scanner went through.

Taking out the last line solves the issue.

Also adding the qualys_vuln scheme to the frameworks_example.ini
1.70
2018-07-05 10:34:02 -07:00
3ac9a8156a Update template to version 5.x (#73)
* Update template to Elasticsearch 5.x

* Update template to Elasticsearch 5.x

I think _all field is no longer needed from ES 5.x because of the search all field execution if _all is disabled
2018-06-30 13:25:29 -07:00
9a08acb2d6 Update README.md 2018-06-26 13:04:40 -04:00
38d2eec065 Tenable.io support (#70)
* Basic tenable.io support

* Add tenable config section

* Use existing variable

* Fix indent

* Fix paren

* Use ternary syntax

* Update Logstash config for tenable.io
2018-06-26 13:03:08 -04:00
9b10711d34 Nessus bugfixes (#68)
* Handle cases where no scans are present

* Prevent infinite login loop with incorrect creds

* Print actual config file path

* Don't overwrite Nessus Synopsis with Description
2018-06-13 02:56:06 -04:00
9049b1ff0f Fix to apt-get install 2018-06-04 20:23:17 -04:00
d1d679b12f Update vulnwhisp.py 2018-05-04 10:03:58 -04:00
8ca1c3540d Removed no longer supported InsecureRequestWarning workaround. (#55)
* Removed no longer supported InsecureRequestWarning workaround.

* Add dependencies to README.md
2018-04-17 13:27:23 -04:00
e4e9ed7f28 Preserving newlines & carriage returns (#48)
* Preserve newlines & carriage returns

* Convert '\n' & '\r' to newlines & carriage returns
2018-04-10 08:54:21 -04:00
0982e26197 Updating config to be consistent with conf files 2018-04-02 17:53:24 -04:00
9fc9af37f7 VulnFramework Links (#39)
Quick update regarding issue #33
2018-03-07 14:21:15 -05:00
3984c879cd Update vulnwhisp.py 2018-03-05 07:03:49 -05:00
f83a5d89a3 ELK Sample Install (#37)
Updated Readme.md to include a Sample ELK Install guide addressing multiple issues around ELK Cluster/Node Configuration.
1.5.0
2018-03-04 19:14:51 -05:00
1400cacfcb Update README.md 2018-03-04 17:18:34 -05:00
6f96536145 Update setup.py 2018-03-04 17:15:32 -05:00
4a60306bdd Addition of openvas logstash config 2018-03-04 16:06:53 -05:00
d509c03d68 Remove template format 2018-03-04 15:41:23 -05:00
f6745b00fd Completion of OpenVAS module 2018-03-04 15:06:09 -05:00
21b2a03b36 Completion of OpenVAS module 2018-03-04 14:33:18 -05:00
a658b7abab Allow template defined config form IDs 2018-03-04 08:43:35 -05:00
f21d3a3f64 Addition of OpenVas -- ready for alpha 2018-03-03 15:54:24 -05:00
53b0b27cb2 Addition of OpenVas -- ready for alpha 2018-03-03 15:53:23 -05:00
d8e813ff5a Merge branch 'master' of github.com:austin-taylor/VulnWhisperer 2018-02-25 21:15:54 -05:00
a0de072394 Automatically create filepath and directory if it does not exist 2018-02-25 21:15:50 -05:00
13dbc79b27 Update 1000_nessus_process_file.conf 2018-02-17 22:57:32 -05:00
42e72c36dd Delete 9000_output_nessus.conf 2018-02-17 22:30:16 -05:00
554b739146 Update 9000_output_nessus.conf 2018-02-17 22:29:41 -05:00
54337d3bfa Addition of OpenVAS 2018-02-11 16:07:50 -05:00
8b63aa4fbc Addition of OpenVAS Connector 2018-02-11 16:02:16 -05:00
5362d6f9e8 Badge addition 2018-01-31 10:12:47 -05:00
645e5707a4 Badge addition 2018-01-31 10:11:14 -05:00
03a2125dd1 Update to README 2018-01-31 10:04:39 -05:00
8e85eb0981 Merge branch 'master' of github.com:austin-taylor/VulnWhisperer 2018-01-31 09:51:55 -05:00
136cc3ac61 Update to README 2018-01-31 09:51:51 -05:00
0c6611711c Merge pull request #23 from HASecuritySolutions/master
HA Sync
2018-01-29 22:38:39 -05:00
f3eb2fbda1 Merge pull request #5 from austin-taylor/master
Fork Sync
2018-01-29 22:38:04 -05:00
124cbf2753 Merge branch 'master' of github.com:austin-taylor/VulnWhisperer 2018-01-29 22:35:55 -05:00
13a01fbfd0 Update to make nessus visualizations consistent with qualys 2018-01-29 22:35:45 -05:00
bbfe7ad71b Merge pull request #22 from austin-taylor/add-license-1
Create LICENSE
2018-01-23 12:07:01 -05:00
330e90c7a0 Create LICENSE 2018-01-23 12:06:48 -05:00