b7d6d6207f
* update qualysapi to latest + PR and refactored vulnwhisperer qualys module to qualys-web * changing config template paths for qualys * Update frameworks_example.ini Will leave for now qualys local folder as "qualys" instead of changing to one for each module, as like this it will still be compatible with the current logstash and we will be able to update master to drop the qualysapi fork once the new version is uploaded to PyPI repository. PR from qualysapi repo has already been merged, so the only missing is the upload to PyPI.
109 lines
3.3 KiB
INI
Executable File
109 lines
3.3 KiB
INI
Executable File
[nessus]
|
|
enabled=true
|
|
hostname=localhost
|
|
port=8834
|
|
username=nessus_username
|
|
password=nessus_password
|
|
write_path=/opt/VulnWhisperer/data/nessus/
|
|
db_path=/opt/VulnWhisperer/data/database
|
|
trash=false
|
|
verbose=true
|
|
|
|
[tenable]
|
|
enabled=true
|
|
hostname=cloud.tenable.com
|
|
port=443
|
|
username=tenable.io_username
|
|
password=tenable.io_password
|
|
write_path=/opt/VulnWhisperer/data/tenable/
|
|
db_path=/opt/VulnWhisperer/data/database
|
|
trash=false
|
|
verbose=true
|
|
|
|
[qualys_web]
|
|
#Reference https://www.qualys.com/docs/qualys-was-api-user-guide.pdf to find your API
|
|
enabled = true
|
|
hostname = qualysapi.qg2.apps.qualys.com
|
|
username = exampleuser
|
|
password = examplepass
|
|
write_path=/opt/VulnWhisperer/data/qualys/
|
|
db_path=/opt/VulnWhisperer/data/database
|
|
verbose=true
|
|
|
|
# Set the maximum number of retries each connection should attempt.
|
|
#Note, this applies only to failed connections and timeouts, never to requests where the server returns a response.
|
|
max_retries = 10
|
|
# Template ID will need to be retrieved for each document. Please follow the reference guide above for instructions on how to get your template ID.
|
|
template_id = 126024
|
|
|
|
[qualys_vuln]
|
|
#Reference https://www.qualys.com/docs/qualys-was-api-user-guide.pdf to find your API
|
|
enabled = true
|
|
hostname = qualysapi.qg2.apps.qualys.com
|
|
username = exampleuser
|
|
password = examplepass
|
|
write_path=/opt/VulnWhisperer/data/qualys/
|
|
db_path=/opt/VulnWhisperer/data/database
|
|
verbose=true
|
|
|
|
# Set the maximum number of retries each connection should attempt.
|
|
#Note, this applies only to failed connections and timeouts, never to requests where the server returns a response.
|
|
max_retries = 10
|
|
# Template ID will need to be retrieved for each document. Please follow the reference guide above for instructions on how to get your template ID.
|
|
template_id = 126024
|
|
|
|
[detectify]
|
|
#Reference https://developer.detectify.com/
|
|
enabled = false
|
|
hostname = api.detectify.com
|
|
#username variable used as apiKey
|
|
username = exampleuser
|
|
#password variable used as secretKey
|
|
password = examplepass
|
|
write_path =/opt/VulnWhisperer/data/detectify/
|
|
db_path = /opt/VulnWhisperer/data/database
|
|
verbose = true
|
|
|
|
[openvas]
|
|
enabled = false
|
|
hostname = localhost
|
|
port = 4000
|
|
username = exampleuser
|
|
password = examplepass
|
|
write_path=/opt/VulnWhisperer/data/openvas/
|
|
db_path=/opt/VulnWhisperer/data/database
|
|
verbose=true
|
|
|
|
#[proxy]
|
|
; This section is optional. Leave it out if you're not using a proxy.
|
|
; You can use environmental variables as well: http://www.python-requests.org/en/latest/user/advanced/#proxies
|
|
|
|
; proxy_protocol set to https, if not specified.
|
|
#proxy_url = proxy.mycorp.com
|
|
|
|
; proxy_port will override any port specified in proxy_url
|
|
#proxy_port = 8080
|
|
|
|
; proxy authentication
|
|
#proxy_username = proxyuser
|
|
#proxy_password = proxypass
|
|
|
|
[jira]
|
|
hostname = jira-host
|
|
username = username
|
|
password = password
|
|
write_path = /opt/VulnWhisperer/data/jira/
|
|
db_path = /opt/VulnWhisperer/data/database
|
|
verbose = true
|
|
|
|
#Sample jira report scan, will automatically be created for existent scans
|
|
#[jira.qualys_vuln.test_scan]
|
|
#source = qualys_vuln
|
|
#scan_name = Test Scan
|
|
#jira_project = PROJECT
|
|
; if multiple components, separate by "," = None
|
|
#components =
|
|
; minimum criticality to report (low, medium, high or critical) = None
|
|
#min_critical_to_report = high
|
|
|