Python package, qualysapi, that makes calling any Qualys API very simple. Qualys API versions v1, v2, & WAS & AM (asset management) are all supported.
My focus was making the API super easy to use. The only parameters the user needs to provide is the call, and data (optional). It automates the following:
Check out the example scripts in the /examples directory.
There are currenty three methods of connecting to Qualys APIs
qualysapi.connect()will prompt the user for credentials at runtime.
qualysapi.connect('/path/to/config.ini')will parse the config file for credentials (see below).
qualysapi.connect(username='username', password='password')will use the provided credentials.
Detailed example found at qualysapi-example.py.
Sample example below.
import qualysapi a = qualysapi.connect() QualysGuard Username: my_username QualysGuard Password: print a.request('about.php') <?xml version="1.0" encoding="UTF-8" ?> <!DOCTYPE ABOUT SYSTEM "https://qualysapi.qualys.com/about.dtd"> <ABOUT> <API-VERSION MAJOR="1" MINOR="4" /> <WEB-VERSION>7.10.61-1</WEB-VERSION> <SCANNER-VERSION>7.1.10-1</SCANNER-VERSION> <VULNSIGS-VERSION>2.2.475-2</VULNSIGS-VERSION> </ABOUT> <!-- Generated for username="my_username" date="2013-07-03T10:31:57Z" --> <!-- CONFIDENTIAL AND PROPRIETARY INFORMATION. Qualys provides the QualysGuard Service "As Is," without any warranty of any kind. Qualys makes no warranty that the information contained in this report is complete or error-free. Copyright 2013, Qualys, Inc. //-->
Use pip to install:
pip install qualysapi
NOTE: If you would like to experiment without installing globally, look into 'virtualenv'.
By default, the package will ask at the command prompt for username and password. By default, the package connects to the Qualys documented host (qualysapi.qualys.com).
You can override these settings and prevent yourself from typing credentials by doing any of the following:
qualysapi.connect(remember_me=True). This automatically generates a .qcrc file in your current working directory, scoping the configuration to that directory.
qualysapi.connect(remember_me_always=True). This automatically generates a .qcrc file in your home directory, scoping the configuratoin to all calls to qualysapi, regardless of the directory.
; Note, it should be possible to omit any of these entries. [info] hostname = qualysapi.serviceprovider.com username = jerry password = I<3Elaine # Set the maximum number of retries each connection should attempt. Note, this applies only to failed connections and timeouts, never to requests where the server returns a response. max_retries = 10 [proxy] ; This section is optional. Leave it out if you're not using a proxy. ; You can use environmental variables as well: http://www.python-requests.org/en/latest/user/advanced/#proxies ; proxy_protocol set to https, if not specified. proxy_url = proxy.mycorp.com ; proxy_port will override any port specified in proxy_url proxy_port = 8080 ; proxy authentication proxy_username = kramer proxy_password = giddy up!
Apache License, Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.html
Special thank you to Colin Bell for qualysconnect.