Skip to content

Releases: rapid7/nexpose-client

Nexpose Client v5.3.2

28 Mar 21:41
Compare
Choose a tag to compare

Bug Fix

Fixed Blackouts to correctly report if the blackout was enabled.

As reported here when loading a Site Blackout, there was a missing option that did not correctly store if the blackout was enabled. A loaded blackout should now correctly report if it is enabled or not.

Nexpose Client v5.3.1

02 Mar 00:12
Compare
Choose a tag to compare

Bug Fix

Fixed SharedCredential#test method

While the SiteCredentials.test method was working correct, tyring to use the .test function for SharedCredentials was always responding that the credentials had failed to login.

Now Site and Shared credentials will both be able to correctly inform about the attempt to authenticate.

Nexpose Client v5.3.0

14 Feb 22:03
Compare
Choose a tag to compare

New Features

Enable SSL certificate validation on Nexpose::Connection

The Nexpose::Connection class now supports an optional parameter, trust_cert, which allows you to provide a PEM-formatted certificate from a Nexpose web server to ensure the connection is trusted. By default, this parameter is nil and means that SSL validation is disabled (consistent with previous versions of the gem). See #254.

For detailed usage information, please see the wiki page Trusting the Nexpose web server certificate for TLS connections.

Documentation Updates

Updated the documentation for the Nexpose::Connection class. See #254.

Miscellaneous Changes

Travis-CI config changes

Removed Ruby 2.1.5 from build targets due to an unresolved issue with RubyGems. The gem is still compatible with all 2.1.x versions of Ruby, but the Travis-CI builds were failing to install development dependencies. Ruby 2.1.9 is still being used in Travis-CI builds.

Updated Ruby 2.2.5 to 2.2.6.
Updated Ruby 2.3.1 to 2.3.3.
Added Ruby 2.4.0 since -head is now using early builds of 2.5.0.

Nexpose Client v5.2.0

31 Jan 01:23
Compare
Choose a tag to compare

New Features

Remove Asset From Site

Adds a new method to the Connection class to remove site association from a collection of assets. Note that this can result in assets being deleted if they either only belong to 1 site or if asset linking is disabled. See #258.

Update Engine

Adds a new method to the Connection class to update a specific engine by ID. See #227.

Bug Fixes

Report Config: Email Delivery Config

Fixed an incorrectly named parameter for the "send to all authorized users" option on a report config's email delivery. See #255.

Documentation Updates

Updated the documentation for the scan date filter. See #257.

Miscellaneous Changes

Github templates

Added Github templates for creating new issues and pull requests. See #247.

Travis-CI config changes

Added rake to dev dependencies and modified travis.yml to update system gems before building. These changes were made to resolve a build issue with some versions of rubygems.

Nexpose Client v5.1.0

27 Aug 00:01
Compare
Choose a tag to compare

New Features

UniqueID (SystemID) for Asset and ExternalAsset

Adds missing UniqueID support for the Asset and ExternalAsset classes. See #241.

Bug Fixes

Sites with non-repeating blackouts fail to load

Fixed a parsing issues that would prevent sites with non-repeating blackouts from being loaded. See #225.

Miscellaneous Changes

Travis-CI build matrix update

Added more Ruby versions and JRuby to the Travis-CI build matrix.

Nexpose Client v5.0.0

23 Jun 20:18
Compare
Choose a tag to compare

Updates

#239 Revert changes to maintenance command URIs.
#232 Fix incorrect documentation for schedule time format, and removed an unused schedule attribute.
#237 Documentation for Email class was made more concise. Thanks to @snehitgajjar

Nexpose Client v4.0.5

02 Jun 19:45
Compare
Choose a tag to compare

Bugs Fixed

#233 the Connection#completed_assets method was returning the wrong ID for assets, which was fixed by #234.

Nexpose Client v4.0.4

17 May 21:59
Compare
Choose a tag to compare

Bug Fix v4.0.4

Update to the Nexpose::Wait class to allow for the Wait object to be initialized once, then be reused multiple times.

Nexpose Client v4.0.3

11 May 23:38
Compare
Choose a tag to compare

Bug Fix v4.0.3

Increased the default for the REXML::Security.entity_expansion_text_limit to be able to correctly output Vulnerabilities which had large amounts of content. For more info see Pull Request: 229.

Nexpose Client v4.0.1 and v4.0.2

06 May 23:00
Compare
Choose a tag to compare

Bug Fix v4.0.2

Updated Asset Filter IP_RANGE has been reincluded and is an alias of IP_ADDRESS.

Bug Fix v4.0.1

Updated Asset Filter IP_ADDRESS to be the correct value.