Nexpose, Rapid7's on-premise option for vulnerability management software, monitors exposures in real-time and adapts to new threats with fresh data, ensuring you can always act at the moment of impact.

Connect Nexpose with LogicHub

1. Navigate to Automations > Integrations.
2. Search for Nexpose.
3. Click Details, then the + icon. Enter the required information in the following fields.
   • Label: Enter a connection name.
   • Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.
   • Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).
   • Remote Agent: Run this integration using the LogicHub Remote Agent.
   • Nexpose Server: Server name for your Nexpose instance.
   • Nexpose Server Port: Server port for your Nexpose instance.
   • Username: Username for your Nexpose instance.
   • Password: Password for your Nexpose instance.
4. After you've entered all the details, click Connect.

Actions for Nexpose

Vulnerability Scan

Scan of a given IP address for vulnerabilities.

Input Field

Get Scan Report

Retrieve the report of the latest scan.

Input Field

Choose a connection that you have previously created to complete the connection.

Find Affected Hosts

Find hosts affected by a given CVE number.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Retrieve All Scans

Find all scans that are currently either active or inactive.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Stop Scan

Stop scan with given ID.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Create Site

Creates a new site with the specified configuration. This uses the v3 API of the Nexpose.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing row of result:

{
	"has_error": false,
	"id": 38,
	"links": [{
		"href": "https://localhost:3780/api/3/sites",
		"rel": "self"
	}, {
		"href": "https://localhost:3780/api/3/sites/38",
		"rel": "Site"
	}],
	"error": null
}

Delete Site

Deletes a specific site. This uses the v3 API of the Nexpose.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing row of result:

{
	"has_error": false,
	"links": [{
		"href": "https://localhost:3780/api/3/sites/38",
		"rel": "self"
	}],
	"error": null
}

Create Site Scan

Creates a new scan schedule for the specified site. This uses the v3 API of the Nexpose.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing row of result:

{
	"has_error": false,
	"id": 1,
	"links": [{
		"href": "https://localhost:3780/api/3/sites/38/scan_schedules",
		"rel": "self"
	}, {
		"href": "https://localhost:3780/api/3/sites/38",
		"rel": "Site"
	}],
	"error": null
}

Delete Site Scan

Deletes all scan schedules from the site. This uses the v3 API of the Nexpose.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing row of result:

{
	"has_error": false,
	"links": [{
		"href": "https://localhost:3780/api/3/sites/38/scan_schedules",
		"rel": "self"
	}],
	"error": null
}

Release Notes

• v2.0.0 - Updated architecture to support IO via filesystem
• v1.1.3 - Made Repeat Day of Week and Repeat Week of Month fields as optional fields.
• v1.1.2 - Added 4 new actions Create Site, Delete Site, Create Site Scan and Delete Site Scan.