8bd3c5cab9
* changing config template paths for qualys * Update frameworks_example.ini Will leave for now qualys local folder as "qualys" instead of changing to one for each module, as like this it will still be compatible with the current logstash and we will be able to update master to drop the qualysapi fork once the new version is uploaded to PyPI repository. PR from qualysapi repo has already been merged, so the only missing is the upload to PyPI. * initialize variable fullpath to avoid break * fix get latest scan entry from db and ignore 'potential' not verified vulns * added host resolv + cache to speed already resolved, jira logging * make sure that vulnerability criticality appears as a label on ticket + automatic actions * jira bulk report of scans, fix on nessus logging, jira time resolution and list all ticket reported assets * added jira ticket data download + change default time window from 6 to 12 months * small fixes * jira logstash files * fix variable confusion (thx Travis :)
98 lines
4.2 KiB
Python
98 lines
4.2 KiB
Python
#!/usr/bin/python
|
|
# -*- coding: utf-8 -*-
|
|
__author__ = 'Austin Taylor'
|
|
|
|
|
|
from vulnwhisp.vulnwhisp import vulnWhisperer
|
|
from vulnwhisp.base.config import vwConfig
|
|
import os
|
|
import argparse
|
|
import sys
|
|
import logging
|
|
|
|
def isFileValid(parser, arg):
|
|
if not os.path.exists(arg):
|
|
parser.error("The file %s does not exist!" % arg)
|
|
else:
|
|
return arg
|
|
|
|
def main():
|
|
|
|
parser = argparse.ArgumentParser(description=""" VulnWhisperer is designed to create actionable data from\
|
|
your vulnerability scans through aggregation of historical scans.""")
|
|
parser.add_argument('-c', '--config', dest='config', required=False, default='frameworks.ini',
|
|
help='Path of config file', type=lambda x: isFileValid(parser, x.strip()))
|
|
parser.add_argument('-s', '--section', dest='section', required=False,
|
|
help='Section in config')
|
|
parser.add_argument('--source', dest='source', required=False,
|
|
help='JIRA required only! Source scanner to report')
|
|
parser.add_argument('-n', '--scanname', dest='scanname', required=False,
|
|
help='JIRA required only! Scan name from scan to report')
|
|
parser.add_argument('-v', '--verbose', dest='verbose', action='store_true', default=True,
|
|
help='Prints status out to screen (defaults to True)')
|
|
parser.add_argument('-u', '--username', dest='username', required=False, default=None, type=lambda x: x.strip(), help='The NESSUS username')
|
|
parser.add_argument('-p', '--password', dest='password', required=False, default=None, type=lambda x: x.strip(), help='The NESSUS password')
|
|
parser.add_argument('-F', '--fancy', action='store_true', help='Enable colourful logging output')
|
|
parser.add_argument('-d', '--debug', action='store_true', help='Enable debugging messages')
|
|
args = parser.parse_args()
|
|
|
|
# First setup logging
|
|
logging.basicConfig(
|
|
stream=sys.stdout,
|
|
level=logging.DEBUG if args.debug else logging.INFO
|
|
)
|
|
logger = logging.getLogger(name='main')
|
|
if args.fancy:
|
|
import coloredlogs
|
|
coloredlogs.install(level='DEBUG' if args.debug else 'INFO')
|
|
|
|
try:
|
|
if args.config and not args.section:
|
|
|
|
# this remains a print since we are in the main binary
|
|
print('WARNING: {warning}'.format(warning='No section was specified, vulnwhisperer will scrape enabled modules from config file. \
|
|
\nPlease specify a section using -s. \
|
|
\nExample vuln_whisperer -c config.ini -s nessus'))
|
|
logger.info('No section was specified, vulnwhisperer will scrape enabled modules from the config file.')
|
|
config = vwConfig(config_in=args.config)
|
|
enabled_sections = config.get_sections_with_attribute('enabled')
|
|
|
|
for section in enabled_sections:
|
|
vw = vulnWhisperer(config=args.config,
|
|
profile=section,
|
|
verbose=args.verbose,
|
|
username=args.username,
|
|
password=args.password,
|
|
source=args.source,
|
|
scanname=args.scanname)
|
|
|
|
vw.whisper_vulnerabilities()
|
|
# TODO: fix this to NOT be exit 1 unless in error
|
|
sys.exit(1)
|
|
|
|
else:
|
|
logger.info('Running vulnwhisperer for section {}'.format(args.section))
|
|
vw = vulnWhisperer(config=args.config,
|
|
profile=args.section,
|
|
verbose=args.verbose,
|
|
username=args.username,
|
|
password=args.password,
|
|
source=args.source,
|
|
scanname=args.scanname)
|
|
|
|
vw.whisper_vulnerabilities()
|
|
# TODO: fix this to NOT be exit 1 unless in error
|
|
sys.exit(1)
|
|
|
|
except Exception as e:
|
|
if args.verbose:
|
|
# this will remain a print since we are in the main binary
|
|
logger.error('{}'.format(str(e)))
|
|
print('ERROR: {error}'.format(error=e))
|
|
# TODO: fix this to NOT be exit 2 unless in error
|
|
sys.exit(2)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|