Qualys

cls
# Change these variables to fit your settings
#$Global:qualysUsername = "uuuuuuuuu" # Please Change
#$Global:qualysPassword = "ppppppppp" # Please Change
#$Global:reportType = "ZZZZ" # pdf,html,mht,xml, or csv
#$hostName = "aaaaaaaaaaa"
# Verify that the host is online by ping
if (test-Connection -ComputerName $hostname -count 1)
break
write-host "$hostName is online"
Get-QualysVMReport
else
Write-Host "$hostName is not Pingable"
}
function Get-QualysVMReport {
# Defining the variables
[string]$Global:scannerName = "QuaylsScanner"
[string]$Global:ipAddress = ([System.Net.Dns]::GetHostAddresses($hostName) | Where

{$_.IPAddressToString -ne "::1"}).IPAddressToString # ip address to scan
$currentDate = Get-Date -Format "dMMMyyyy HHmm"
$Global:title = "Qualys" + "$currentDate "
$Global:vmScanProfile = "# # # # # # # " # Default Scanner ID
$Global:vmReportProfile = "# # # # # # " # Default Report ID
$Global:Outfile = "$title" +".$reportType"

# declare url and working with powershell
$Global:headers = @{"X-Requested-With"="powershell"}
$Global:baseUrl = "https://qualysapi.qualys.com/api/2.0/fo"
$Global:body = "action=login&username=$qualysUsername&password=$qualysPassword"
# Login and create an open session
Invoke-RestMethod -Headers $headers -Uri "$baseurl/session/" -Method Post -Body

$body -SessionVariable websession
# Launch New Vunerability Management Scan
Invoke-RestMethod -Headers $headers -Uri "$baseUrl/scan/?

action=launch&scan_title=$title&ip=$ipAddress&option_id=$pcScanProfile&iscanner_nam
e=$scannerName" -Method Post -WebSession $webSession
# Check to see if Scan Complete based on scan title.
function Get-ScanStatus {
Write-Host "Checking on Status of the Scan."
$Global:latestQualysScan = (Invoke-RestMethod -Headers $headers -Uri

"$baseurl/scan?action=list" -WebSession
$webSession).SelectNodes("//SCAN[contains(TITLE, '$title')]")
if ($latestQualysScan.Status.OuterXml -like "*Finished*"){
Write-Host "Scan is Finished"}
else {
start-sleep -Seconds 30
write-host "Scan still Running"
Get-ScanStatus
Get-ScanStatus
# Launch New Report base from the Scan
Invoke-RestMethod -Headers $headers -Uri "$baseUrl/report/?

action=launch&template_id=$pcReportProfile&report_title=$title&output_format=$repor
tType&ips=$ipAddress" -Method Post -WebSession $webSession
# Check to see if Report Complete
function Get-ReportStatus {
Write-Host "Checking on Status of the Report."
$Global:latestQualysReport = (Invoke-RestMethod -Headers $headers -Uri

"$baseurl/report?action=list" -WebSession
$webSession).SelectNodes("//REPORT[contains(TITLE, '$title')]")
if ($latestQualysReport.Status.OuterXml -like "*Finished*"){

Write-Host "Scan is Finished"
$global:reportID = $latestQualysReport.id}
else {
write-host "Report still Running"
Get-ReportStatus
Get-ReportStatus
# Download the Report File

action=fetch&id=$reportID" -Method Post -WebSession $webSession -OutFile $outFile
# Logout

"action=logout" -WebSession $webSession
TOPIC
Qualys Vulnerbility Scan and Reporting

SHORT DESCRIPTION
This will output a pdf of the Vulnerbility Scan
LONG DESCRIPTION
The purpose of this script to to run a Vulnerbility Management Scan against a

single
ip addres or a list of ip address. It will output a pdf in the same directory
EXAMPLES
.. Running a scan against multiple ip address downloading a xml using

QualysScanner01 using the default Scan Profile and default Report Profile
Get-VMReports -qualysUsername "xxxx" -qualysPassword "P@ssw0rd" -scannerName

"QualysScanner01" -reportType XML -ipAddress "10.10.10.10,10.10.10.11,10.10.10.12-
10.10.10.20"
EXAMPLES
.. Running a scan against one ip address downloading a PDF using

QualysScanner01 ,Scan Profile 123456 and Report Profile 234567

"QualysScanner01" -reportType PDF -ipAddress "10.10.10.10" -vmScanProfile -
vmReportProfile
EXAMPLES
.. Running a scan against one ip address downloading a PDF against server

10.10.10.10 with vmProfile 123456 and vmReportProfile 234567

"Scanner" -reportType PDF -ipAddress "10.10.10.10" -vmScanProfile 123456 -
vmReportProfile 234567
KEYWORDS
Qualys Vulnerbility Scan and Report

SEE ALSO
Function Get-VMReports {
[CmdletBinding()]
Param(
[Parameter(Mandatory=$True,Position=1)]
[string]$qualysUsername,
[string]$qualysPassword,
[string]$scannerName,
# ReportType can be either pdf,html,mht,xml, or csv
[string]$reportType,
[string]$ipAddress
[Parameter(Position=6)]
[string]$vmScanProfile
[Parameter(Position=7)]
[string]$vmReportProfile
)
Begin {
CLS
}
Process{
$currentDate = Get-Date -Format "dMMMyyyy HHmm"
$title = "Windows Qualys VM " + "$hostName " + "$currentDate " + "-

$qualysUsername"
$Outfile = "Qualys VM " + "$hostName - " + "$currentDate" +".$reportType"

# Setting the required Qualys url information
$Global:headers = @{"X-Requested-With"="powershell"}
$Global:baseUrl = "https://qualysapi.qualys.com/api/2.0/fo"
$Global:body = "action=login&username=$qualysUsername&password=$qualysPassword"
# Login and create an open session

$body -SessionVariable websession
# Launch New Vunerability Management Scan
$vms = Invoke-RestMethod -Headers $headers -Uri "$baseUrl/scan/?

action=launch&scan_title=$title&ip=$ipAddress&option_id=$vmScanProfile&iscanner_nam
e=$scannerName" -Method Post -WebSession $webSession
$vmstext = ($vms).SIMPLE_RETURN.RESPONSE.TEXT
$s = [xml]$vms.SIMPLE_RETURN.RESPONSE.ITEM_LIST.OuterXml
[string]$Global:vmScanRef = ($s.ITEM_LIST.InnerText).remove(0,19)
if ($vmstext -like "*launched*"){
Write-host "New VM Scan started for $hostname"}

else {
Write-Host "The New VM Scan did not start becuase of " + $vmstext
Break
}
# Check to see if Scan Complete based on scan title.
function Get-ScanStatus {
Write-Host "Checking on Status of the Scan."
$Global:latestVMQualysScan = Invoke-RestMethod -Headers $headers -Uri

"$baseurl/scan?action=list&scan_ref=$vmScanRef&show_last=1&show_status=1" -
WebSession $webSession
if ($latestVMQualysScan.SCAN_LIST_OUTPUT.RESPONSE.SCAN_LIST.scan.STATUS.STATE -like
"*Finished*"){
Write-Host "Scan is Finished"}
else {
write-host "Scan still Running"
Get-ScanStatus
Get-ScanStatus
# Launch New Report base from the Scan
$vmr = Invoke-RestMethod -Headers $headers -Uri "$baseUrl/report/?

action=launch&template_id=$vmReportProfile&report_title=$title&output_format=$repor
tType&ips=$ipAddress" -Method Post -WebSession $webSession
$vmrtext = ($vmr).SIMPLE_RETURN.RESPONSE.TEXT
$r = [xml]$vmr.SIMPLE_RETURN.RESPONSE.ITEM_LIST.OuterXml
[string]$Global:vmReportRef = ($s.ITEM_LIST.InnerText).remove(0,19)
if ($vmrtext -like "*launched*"){
Write-host "New VM Report started for $hostname"}
else {
Write-Host "The New VM Report did not start becuase of " + $vmrtext
Break
}
# Check to see if Report Complete
function Get-ReportStatus {
Write-Host "Checking on Status of the Report."
$Global:latestQualysReport = (Invoke-RestMethod -Headers $headers -Uri

"$baseurl/report?action=list" -WebSession
$webSession).SelectNodes("//REPORT[contains(TITLE, '$title')]")
if ($latestQualysReport.Status.OuterXml -like "*Finished*"){
Write-Host "Scan is Finished"
$global:reportID = $latestQualysReport.id}
else {
write-host "Report still Running"
Get-ReportStatus
}
Get-ReportStatus
# Download the Report File

action=fetch&id=$reportID" -Method Post -WebSession $webSession -OutFile $outFile
}
End {
# Logout

"action=logout" -WebSession $webSession
}
}

Qualys

Uploaded by

Copyright:

Available Formats

Qualys

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Qualys

Uploaded by

Copyright:

Available Formats

cls

# Change these variables to fit your settings

#$Global:qualysUsername = "uuuuuuuuu" # Please Change

#$Global:qualysPassword = "ppppppppp" # Please Change

#$Global:reportType = "ZZZZ" # pdf,html,mht,xml, or csv

if (test-Connection -ComputerName $hostname -count 1)

write-host "$hostName is online"

Write-Host "$hostName is not Pingable"

# Defining the variables

[string]$Global:ipAddress = ([System.Net.Dns]::GetHostAddresses($hostName) | Where

$currentDate = Get-Date -Format "dMMMyyyy HHmm"

$Global:title = "Qualys" + "$currentDate "

$Global:vmScanProfile = "# # # # # # # " # Default Scanner ID

$Global:vmReportProfile = "# # # # # # " # Default Report ID

$Global:Outfile = "$title" +".$reportType"

Invoke-RestMethod -Headers $headers -Uri "$baseurl/session/" -Method Post -Body

# Launch New Vunerability Management Scan

Invoke-RestMethod -Headers $headers -Uri "$baseUrl/scan/?

# Check to see if Scan Complete based on scan title.

Write-Host "Checking on Status of the Scan."

$Global:latestQualysScan = (Invoke-RestMethod -Headers $headers -Uri

if ($latestQualysScan.Status.OuterXml -like "*Finished*"){

Write-Host "Scan is Finished"}

write-host "Scan still Running"

Invoke-RestMethod -Headers $headers -Uri "$baseUrl/report/?

# Check to see if Report Complete

Write-Host "Checking on Status of the Report."

$Global:latestQualysReport = (Invoke-RestMethod -Headers $headers -Uri

if ($latestQualysReport.Status.OuterXml -like "*Finished*"){

write-host "Report still Running"

# Download the Report File

Invoke-RestMethod -Headers $headers -Uri "$baseUrl/report/?

Invoke-RestMethod -Headers $headers -Uri "$baseurl/session/" -Method Post -Body

Qualys Vulnerbility Scan and Reporting

The purpose of this script to to run a Vulnerbility Management Scan against a

ip addres or a list of ip address. It will output a pdf in the same directory

.. Running a scan against multiple ip address downloading a xml using

Get-VMReports -qualysUsername "xxxx" -qualysPassword "P@ssw0rd" -scannerName

.. Running a scan against one ip address downloading a PDF using

Get-VMReports -qualysUsername "xxxx" -qualysPassword "P@ssw0rd" -scannerName

.. Running a scan against one ip address downloading a PDF against server

Get-VMReports -qualysUsername "xxxx" -qualysPassword "P@ssw0rd" -scannerName

Qualys Vulnerbility Scan and Report

# ReportType can be either pdf,html,mht,xml, or csv

$currentDate = Get-Date -Format "dMMMyyyy HHmm"

$title = "Windows Qualys VM " + "$hostName " + "$currentDate " + "-

$Outfile = "Qualys VM " + "$hostName - " + "$currentDate" +".$reportType"

Invoke-RestMethod -Headers $headers -Uri "$baseurl/session/" -Method Post -Body

# Launch New Vunerability Management Scan

$vms = Invoke-RestMethod -Headers $headers -Uri "$baseUrl/scan/?

Write-host "New VM Scan started for $hostname"}

Write-Host "Checking on Status of the Scan."

$Global:latestVMQualysScan = Invoke-RestMethod -Headers $headers -Uri

Write-Host "Scan is Finished"}

write-host "Scan still Running"

$vmr = Invoke-RestMethod -Headers $headers -Uri "$baseUrl/report/?

Write-host "New VM Report started for $hostname"}

Write-Host "Checking on Status of the Report."

$Global:latestQualysReport = (Invoke-RestMethod -Headers $headers -Uri

if ($latestQualysScan.Status.OuterXml -like "Finished"){

if ($latestQualysReport.Status.OuterXml -like "Finished"){

if ($latestQualysReport.Status.OuterXml -like "Finished"){