Class: Nexpose::Connection

Inherits:
Object
  • Object
show all
Includes:
NexposeAPI, XMLUtils
Defined in:
lib/nexpose.rb

Overview

Description

Object that represents a connection to a NeXpose Security Console.

Examples

# Create a new Nexpose Connection on the default port
nsc = Connection.new("10.1.40.10","nxadmin","password")

# Login to NSC and Establish a Session ID
nsc.()

# Check Session ID
if (nsc.session_id)
    puts "Login Successful"
else
    puts "Login Failure"
end

# //Logout
logout_success = nsc.logout()
if (! logout_success)
    puts "Logout Failure" + "<p>" + nsc.error_msg.to_s
end

Instance Attribute Summary collapse

Instance Method Summary collapse

Methods included from NexposeAPI

#asset_group_config, #asset_group_delete, #asset_groups_listing, #console_command, #device_delete, #make_xml, #report_config_delete, #report_delete, #report_generate, #report_history, #report_last, #report_template_listing, #scan_activity, #scan_statistics, #scan_status, #scan_stop, #site_delete, #site_device_listing, #site_device_scan_start, #site_listing, #site_scan_history, #system_information

Methods included from XMLUtils

#parse_xml

Constructor Details

#initialize(ip, user, pass, port = 3780) ⇒ Connection

Constructor for Connection



620
621
622
623
624
625
626
627
628
 
# File 'lib/nexpose.rb', line 620

def initialize(ip, user, pass, port = 3780)
	@host = ip
	@port = port
	@username = user
	@password = pass
	@session_id = nil
	@error = false
	@url = "https://#{@host}:#{@port}/api/1.1/xml"
end

Instance Attribute Details

#error ⇒ Object (readonly)

true if an error condition exists; false otherwise



599
600
601
 
# File 'lib/nexpose.rb', line 599

def error
  @error
end

#error_msg ⇒ Object (readonly)

Error message string



601
602
603
 
# File 'lib/nexpose.rb', line 601

def error_msg
  @error_msg
end

#host ⇒ Object (readonly)

The hostname or IP Address of the NSC



609
610
611
 
# File 'lib/nexpose.rb', line 609

def host
  @host
end

#password ⇒ Object (readonly)

The password used to login to the NSC



615
616
617
 
# File 'lib/nexpose.rb', line 615

def password
  @password
end

#port ⇒ Object (readonly)

The port of the NSC (default is 3780)



611
612
613
 
# File 'lib/nexpose.rb', line 611

def port
  @port
end

#request_xml ⇒ Object (readonly)

The last XML request sent by this object



603
604
605
 
# File 'lib/nexpose.rb', line 603

def request_xml
  @request_xml
end

#response_xml ⇒ Object (readonly)

The last XML response received by this object



605
606
607
 
# File 'lib/nexpose.rb', line 605

def response_xml
  @response_xml
end

#session_id ⇒ Object (readonly)

Session ID of this connection



607
608
609
 
# File 'lib/nexpose.rb', line 607

def session_id
  @session_id
end

#url ⇒ Object (readonly)

The URL for communication



617
618
619
 
# File 'lib/nexpose.rb', line 617

def url
  @url
end

#username ⇒ Object (readonly)

The username used to login to the NSC



613
614
615
 
# File 'lib/nexpose.rb', line 613

def username
  @username
end

Instance Method Details

#download(url) ⇒ Object

Download a specific URL



658
659
660
661
662
663
664
665
666
 
# File 'lib/nexpose.rb', line 658

def download(url)
	uri = URI.parse(url)
	http = Net::HTTP.new(@host, @port)
	http.use_ssl = true
	http.verify_mode = OpenSSL::SSL::VERIFY_NONE            # XXX: security issue
	headers = {'Cookie' => "nexposeCCSessionID=#{@session_id}"}
	resp, data = http.get(uri.path, headers)
	data
end

#execute(xml) ⇒ Object

Execute an API request



653
654
655
 
# File 'lib/nexpose.rb', line 653

def execute(xml)
	APIRequest.execute(url,xml.to_s)
end

#login ⇒ Object

Establish a new connection and Session ID



631
632
633
634
635
636
637
638
639
640
641
 
# File 'lib/nexpose.rb', line 631

def 
	begin
		r = execute(make_xml('LoginRequest', { 'sync-id' => 0, 'password' => @password, 'user-id' => @username }))
	rescue APIError
		raise AuthenticationFailed.new(r)
	end
	if(r.success)
		@session_id = r.sid
		return true
	end
end

#logout ⇒ Object

Logout of the current connection

Raises:



644
645
646
647
648
649
650
 
# File 'lib/nexpose.rb', line 644

def logout
	r = execute(make_xml('LogoutRequest', {'sync-id' => 0}))
	if(r.success)
		return true
	end
	raise APIError.new(r, 'Logout failed')
end