Skip to content

Add files via upload #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion python/Python API script with various functions/README.md
Original file line number Diff line number Diff line change
@@ -34,4 +34,6 @@ For more information about the fixed issues, a CSV can be found in this director

12. Running "12" will allow you to update the scan schedule for your scan profiles.

13. Will remove the scan schedule for all profiles within a team.
13. Will remove the scan schedule for all profiles within a team.

14. This option allow you to enable or disable Asset Monitoring across all of your asset. Note that default setting for this when enabling is to use both brute forcing and scraping. See https://developer.detectify.com/#asset-inventory-manage-asset-settings-put for more information.
Original file line number Diff line number Diff line change
@@ -70,6 +70,9 @@ def request(apiKey, secret_key, path, method, payload={}):
elif method == 'POST':
print(json.dumps(payload))
return check_request_error(requests.post(url, data=json.dumps(payload), headers=headers))
elif method == 'PUT':
print(json.dumps(payload))
return check_request_error(requests.put(url, data=json.dumps(payload), headers=headers))
elif method == 'DELETE':
return check_request_error(requests.delete(url, headers=headers))
except requests.exceptions.RequestException as e:
@@ -147,7 +150,6 @@ def add_scan_profile_csv(apiKey, secret_key):

def update_scan_schedule(apiKey, secret_key,frequency):
all_profiles=get_all_profiles(apiKey, secret_key)
print(frequency)
for item in all_profiles:
scanProfile=item["token"]
path = "/scanschedules/"+scanProfile+"/"
@@ -157,6 +159,26 @@ def update_scan_schedule(apiKey, secret_key,frequency):
if req != None:
print(item["endpoint"] + " - scan schedule updated to " + frequency + "\n")

def update_asset_settings(apiKey, secret_key, monitoring):
all_domains = get_domains(apiKey, secretKey)
for i in all_domains:
domainToken=i["token"]
print(domainToken)
path="/domains/"+domainToken+"/settings/"
req = request(apiKey, secret_key, path, 'PUT', {
'monitoring': monitoring,
'scrape': monitoring,
'brute_force': monitoring
})
if req != None:
if monitoring == True:
status="enabled"
print(i["name"] + " - Asset Monitoring " + status + "\n")
elif monitoring == False:
status="disabled"
print(i["name"] + " - Asset Monitoring " + status + "\n")


def delete_scan_schedule(apiKey, secret_key):
all_profiles=get_all_profiles(apiKey, secret_key)
for item in all_profiles:
@@ -209,7 +231,7 @@ def get_findings_for_scan_profile(scan_profile, apiKey, secret_key):
path = "/findings/" + scan_profile + "/?severity=high&from=" + str(int(time.time()-time_interval*86400)) + "&to=" + str(int(time.time()))
req = request(apiKey, secret_key, path, 'GET', 'No reports found for scanprofile: ' + scan_profile)
if req != None:
return eval(req.text)
return json.loads(req.text)

def get_reports(scan_profile, apiKey, secret_key):
path = "/reports/" + scan_profile + "/?from=" + str(int(time.time()-time_interval*86400)) + "&to=" + str(int(time.time()))
@@ -462,7 +484,9 @@ def counting_all_scanprofiles(apiKey, teamName):
print("10. DELETING all scan profiles")
print("11. Get info about remediation time for past " + str(time_interval) + " days")
print("12. Updating scan schedule(s) for scan profiles")
print("13. Removing scan schedule(s) for scan profiles"+ "\n")
print("13. Removing scan schedule(s) for scan profiles")
print("14. Enable/disable Asset Monitoring"+ "\n")




@@ -771,3 +795,33 @@ def counting_all_scanprofiles(apiKey, teamName):
while action_team < 1 or action_team > len(df):
action_team = int(raw_input("Select to which team you want to add the domain by specifying one of the integers: "))
delete_scan_schedule(df.iloc[action_team-1,1], secretKey)

elif action == '14':
print("Enable/disable Asset Monitoring (AM) for your assets. " "\n")
with open('apikeys.csv', 'rU') as csvfile:
#Skipping the title and first row in CSV
next(csvfile)
#Reads from CSV (apikeys.csv) in the same folder
apireader = csv.reader(csvfile, delimiter=';')
df=pd.read_csv('apikeys.csv', delimiter=';')
print("To which team do you wish to Enable/disable the Asset Monitoring?")
x=1
for row in apireader:
apiKey = row[1]
print("\n"+"TEAM: "+ row[0] + " (" + str(x) + ")")
x=x+1


while action_team < 1 or action_team > len(df):
action_team = int(raw_input("Select to which team you want to change the asset setting: "))
print("Select if you want to disable or enable Asset Monitoring across all of your assets: " + "\n")
print("Enable (1)")
print("Disable (2)")
setting = int(raw_input("Enter your option: "))

if setting == 1:
monitoring = True
elif setting == 2:
monitoring = False
update_asset_settings(df.iloc[action_team-1,1], secretKey, monitoring)