Home

Welcome to the VulnWhisperer wiki!

FAQ

• Is there a VulnWhisperer Dockerfile?

The official VulnWhisperer Dockerfile is maintained at HASecuritySolutions/docker_vulnwhisperer. This one though at the moment is outdated and the currently supported is still at qmontal/docker_vulnwhisperer's fork, to be merged.

• Why are you using a fork of qualysapi library?

We do us our own fork of the qualysapi library as it is with the one we have tested the project and we are sure it is working, we prefer doing that than running into issues because of code changes on the future dependency releases.

• [Qualys VM] I have locked my account due to too many bad attempts?

The account connection done in the Qualys Vulnerability Management module is managed by the qualysapi library dependency. We have had issues in the past in which the qualysapi was not correctly escaping symbols (e.g. $) or didn't work with the manager account but it did with a test read-only account. You might need to escape the symbols characters with a backslash.

• [Qualys VM] I'm trying to run Qualys VM module but I get [FAIL] ERROR: no such child: count?

You might be having enabled in your config file the [qualys] module (Qualys Web Scanner) instead of the [qualys_vuln] (Qualys Vulnerability Management).

• [Kibana's Dashboard] Unable to fetch mapping. Do you have indices matching the pattern?

Troubleshooting this issue can be found here.

• [Kibana's Dashboard] Dashboard 'No results found'?

Kibana has its own time picker on top right, which by default has selected the last 15 minutes; this usually brings confusion making it seem that data failed to be feeded to ElasticSearch/Kibana. Change the time window (e.g to last 30 days) to check if it is a time window issue.