Nexpose Security Console
For security engineers who need to interact with a Rapid7 Nexpose console, the nexpose-security-console gem is a command line utility that manage (e.g. create, list, update, and remove) the following entities: - sites, - scans, - assets, - asset groups, - reports, - vulnerabilities - etc…
Personal scratch
I need to delete ~ 100 thousands assets from a group asset. The web GUI only allows to delete 500 at a time. Hence, nexpose-security-console was born.
Installation
Simply run the command below
$ gem install nexpose-security-console
Usage
You can get help on available commands.
NAME nsc - CLI to interface with Nexpose Security Console SYNOPSIS nsc [global options] command [command options] [arguments...] VERSION 0.0.2 GLOBAL OPTIONS --help - Show this message --version - Display the program version COMMANDS assets - Manage assets bulk_delete - Bulk delete assets with unknown OS connect, login - Verify connection to the server groups - Manage asset groups help - Shows a list of commands or help for one command reports - Manage reports sites - Manage sites
Configuration
# ~/lab.yaml consists of the following: config: server: 10.10.10.10 port: 3780 user: nxuser password: password
Development
Checkout the github repository
git clone https://github.com/rhc/nexpose-security-console
Access the source code folder directory.
$ cd nexpose-security-console
Install dependencies
bin/setup
Run the tests
rake test
Experiment with the code under development
run bin/console
Install this gem onto your local machine
bundle exec rake install
Release a new version
gem bump gem release
Contributing
In the spirit of free software, everyone is encouraged to help improve this project.
If you discover errors or omissions in the source code, documentation, or website content, please don’t hesitate to submit an issue or open a pull request with a fix. New contributors are always welcome!
License
The gem is available as open source under the terms of the MIT License.