For security engineers who needs to interact with a Rapid7 Nexpose console, the nexpose-security-console gem is a Git like command line utility that manage (e.g. create, list, update, and remove) the following entities: - sites, - scans, - assets, - asset groups, - reports, - vulnerabilities - etc…​

Personal scratch

I need to delete ~ 100 thousands assets from a group asset. The web GUI only allows to delete 500 at a time. Hence, nexpose-security-console was born.

Installation

From Ruby Gems

Simply run the command below

$ gem install nexpose-security-console

From source code

  • If you have access to the Internet, obtain the source code from Github repository.

    $ git clone https://github.com/rhc/nexpose-security-console.git
  • Access the source code folder directory.

    $ cd nexpose-security-console
  • Install the dependencies

    $ bin/setup
  • Install the gem in your local machine

    $ bundle exec rake install
  • Run the test suite

    $ rake test

Usage

You can get help on available commands.

$ nsc help
Commands:
  nsc --version, -v   # Print the version
  nsc help [COMMAND]  # Describe available commands or one specific command

Configuration

# ~/lab.yaml consists of the following:

config:
   server: 10.10.10.10
   port: 3780
   user: nxuser
   password: password

License

The gem is available as open source under the terms of the MIT License.