Automate multiple WAS scanning

Document created by Q Nimbus on Aug 20, 2012Last modified by Parag Baxi on Jan 10, 2014
Version 17Show Document
  • View in full screen mode

Note: This is unsupported.

Automate concurrent scanning of multiple QualysGuard webapps.

Source and documentation: https://github.com/paragbaxi/qualysguard_was_scan_queue

Workflow

Here's what the script does:

  1. Selects the applications you want to scan based on filters.
  2. Lists selected applications.
  3. Runs scans against applications using default option profile (can be overridden).

Examples

List web applications with tag "Product Management"

python qualysguard_scan_queue.py --tag "Product Management" --list

Run 2 simultaneous discovery scans against all web applications

python qualysguard_scan_queue.py --all_apps --scan_type discovery --concurrency_limit 2 --scan

Run vulnerability scans against web applications with tag "QA"

python qualysguard_scan_queue.py --tag "QA" --scan_type vulnerability --scan

Troubleshoot why script will not work (put in debug mode)

python qualysguard_scan_queue.py --all_apps --scan_type discovery --scan --debug

Attachments

    Outcomes