leonjza/php-nessus-ng

PHP wrapper functions for interfacing with the Nessus V6.x API

Tuesday, February 14, 2017
by leonjza
Repository
6 Watchers
13 Stars
2,010 Installations

PHP
0 Dependents
0 Suggesters
10 Forks
1 Open issues
21 Versions
3 % Grown

The README.md

PHPNessusNG

, _(*1)

PHP wrapper functions for interfacing with the Nessus V6.x API., _(*2)

If you are looking for the Nessus V5.x capable XMLRPC API Class, please see the n5 branch here, _(*3)

Information:

The Nessus 6 Vulnerability Scanner provides a RESTful API interface. This library aims to be a wrapper around this API, allowing you to query it directly, as detailed in the API documentation., _(*4)

One major advantage of this library is that it does not necessarily have to update when new endpoints are made available. It is simply a wrapper. Calls to the API can be made exactly as it is documented in the API reference found at the /api resource of your local scanner. For eg. If a API endpoint is defined as:, _(*5)

DELETE /scans/{scan_id}

Then you can call it with:, _(*6)

$client->scans($id)->via('delete');

The latest version of this wrapper has only been tested against a Nessus 6.1 scanner., _(*7)

Concepts:

There are a fair number of ways to use this library. All methods start the same way though; Instantiating a new instance. The library will handle the authentication cookie automatically internally., _(*8)

Some examples of calling the API:, _(*9)

<?php

include 'vendor/autoload.php';

$t = new Nessus\Client('username', 'password', 'hostname.local');

Now, you may call API methods either via method chaining, or via the call(), method.
A method chaining example (assuming $scan_id == 5) would be:, _(*10)

// Get a file ID for a new report export
$file_id = $t->scans($scan_id)->export()->setFields(array('format' => 'nessus'))->via('post');

The same using the call() method would be:, _(*11)

// Get a file ID for a new report export
$t->setFields(array('format' => 'nessus'));
$t->call('scans/5/export/');
$file_id = $t->via('post');

NOTE: All calls should end with a via($method), where $method is the HTTP method to use. via() accepts a second argument, which specifies if a response should be returned raw if true, or a parsed JSON object if not set (false)., _(*12)

Installation:

The easiest way by far would be to install the library via composer. Add the following line to your composer.json:, _(*13)

"leonjza/php-nessus-ng": "~1.0"

Run php composer.phar update. You should now have the \Nessus class available to use., _(*14)

This will give you the Nessus V6 compatible library. As previously mentioned, should you require the V5 compatile version, its details can be found in the n5 branch., _(*15)

Usage example:

Include the Composer Autoloader, instantiate a new instance, and start using it. Below is an example script that will download the first available report in the .nessus format:, _(*16)

<?php

include 'vendor/autoload.php';

$t = new Nessus\Client('username', 'password', 'hostname.local');

// Get a scan_id to export a report for.
$scan_id = $t->scans()->via('get')->scans[0]->id;

// Request the export, taking note of the returned file_id that we need.
$file_id = $t->scans($scan_id)->export()->setFields(array('format' => 'nessus'))->via('post')->file;

// Set a status that will update as we poll for a status
$export_status = 'waiting';

// If the export status is ready, break.
while ($export_status != 'ready') {

    // Poll for a status update
    $export_status = $t->scans($scan_id)->export($file_id)->status()->via('get')->status;

    // Wait 1 second before another poll
    sleep(1);
}

// Get the .nessus report export, specifying that we want it via a raw get
$file = $t->scans($scan_id)->export($file_id)->download()->via('get', true);

Contact

Twitter: @leonjza, _(*17)

The Versions

14/02 2017

dev-master

9999999-dev

PHP wrapper functions for interfacing with the Nessus V6.x API

library php-nessus-ng

PHP wrapper functions for interfacing with the Nessus V6.x API

leonjza/php-nessus-ng

The README.md

PHPNessusNG

Information:

Concepts:

Installation:

Usage example:

Contact

The Versions

dev-master

The Requires

The Development Requires

by Leon Jacobs

by Peter Scopes

1.0.8

The Requires

The Development Requires

by Leon Jacobs

by Peter Scopes

1.0.7

The Requires

The Development Requires

by Leon Jacobs

by Peter Scopes

1.0.6

The Requires

The Development Requires

by Leon Jacobs

by Peter Scopes

1.0.5

The Requires

by Leon Jacobs

1.0.4

The Requires

by Leon Jacobs

1.0.3

The Requires

by Leon Jacobs

1.0.2

The Requires

by Leon Jacobs

1.0.1

The Requires

by Leon Jacobs

1.0.0

The Requires

by Leon Jacobs

dev-n5

The Requires

by Leon Jacobs

0.6

The Requires

by Leon Jacobs

0.5.4

The Requires

by Leon Jacobs

0.5.3

The Requires

by Leon Jacobs

0.5.2

The Requires

by Leon Jacobs

0.5.1

The Requires

by Leon Jacobs

0.5

The Requires

by Leon Jacobs

0.4

The Requires

by Leon Jacobs

0.3

The Requires

by Leon Jacobs

0.2

The Requires

by Leon Jacobs

0.1