apisec_single_cat_scan_script.sh

#!/bin/bash
# Begin

# With this script we can sequentially triggered scans on UnSecured category of all projects of a user account.
# It will trigger one scan  per project on a particular page.

# How to run this script.
# Syntax:        bash apisec_single_cat_scan_script.sh  --username "<username>"           --password "<password>" --scanner "<scanner-name>" --profile "<profile-name>" --hostname "<Hostname or IP>" --fromPage "<begin-page-no>" --toPage "<end-page-no>"
# Example usage: bash apisec_single_cat_scan_script.sh  --username "admin@apisec.ai"      --password "hello@234"  --scanner "us-west-1"      --profile "Master"         --hostname "20.99.193.218"    --fromPage "0"               --toPage "5"



TEMP=$(getopt -n "$0" -a -l "username:,password:,scanner:,profile:,hostname:,toPage:,fromPage:" -- -- "$@")

    [ $? -eq 0 ] || exit

    eval set --  "$TEMP"

    while [ $# -gt 0 ]
    do
             case "$1" in
                    --username) FX_USER="$2"; shift;;
                    --password) FX_PWD="$2"; shift;;
                    --scanner) REGION="$2"; shift;;
                    --profile) PROFILE_NAME="$2"; shift;;
                    --hostname) FX_HOSTNAME="$2"; shift;;
                    --fromPage) PAGE="$2"; shift;;
                    --toPage) PAGES="$2"; shift;;
                    --) shift;;
             esac
             shift;
    done

token=$(curl -s -k -H "Content-Type: application/json" -X POST -d '{"username": "'${FX_USER}'", "password": "'${FX_PWD}'"}' https://${FX_HOSTNAME}/login | jq -r .token)
echo "generated token is:" $token
echo " "
tscancount=0
scancount=0
string1=$(date -u | awk '{print $4}')
while [ $PAGE -le $PAGES ]
do
   projectIds=$(curl -s -k --location --request GET "https://${FX_HOSTNAME}/api/v1/projects/myProjects?page=${PAGE}&pageSize=10" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.[]|.| .name + " " + .id')
   echo " "
   echo "Scanning will be triggered on the following projects of ${PAGE} page of the ${FX_USER} user account!!!"
   echo "-----------------------------------------------"
   echo "$projectIds"
   echo "-----------------------------------------------"
   projectnames=$(echo "$projectIds" | awk '{print $1}')
   projectids=$(echo "$projectIds" | awk '{print $2}')
   projSeq=$(paste -d':' <(printf '%s\n' "${projectnames}") <(printf '%s\n' "${projectids}"))
   echo " "
   count=0
   for i in ${projSeq}
   do
     project_name=$(echo $i | cut -d: -f1)
     project_id=$(echo $i | cut -d: -f2)
     SECONDS=0
     count=`expr $count + 1`
     scancount=`expr $scancount + 1`  
     echo " "
     echo "Scan No: ${scancount}"
     echo "Projects Page ${PAGE} Iteration. count No: ${count}"
     echo "ProjectName: ${project_name}"
     echo "ProjectID: "${project_id}""
     data=$(curl -s -k --location --request GET "https://${FX_HOSTNAME}/api/v1/jobs/project-id/${project_id}?page=0&pageSize=10" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.[]')
     ProfNames=$(echo $data | jq -r '.name')
     ProfIds=$(echo $data | jq -r '.id')
     EnvIds=$(echo $data | jq -r '.environment.id')
     profSeq=$(paste -d':' <(printf '%s\n' "${ProfNames}") <(printf '%s\n' "${ProfIds}") <(printf '%s\n' "${EnvIds}"))
     
            ProfCount=0            
            
            for pSeq in ${profSeq}
               do
                   pName=$(echo "$pSeq" | cut -d: -f1)                      
                   if [ "$pName" == "$PROFILE_NAME" ]; then   
                         ProfCount=`expr $ProfCount + 1`
                         jobID=$(echo "$pSeq" | cut -d: -f2)
                         envID=$(echo "$pSeq" | cut -d: -f3)
                         echo "envID: $envID"
                         echo "JobID: $jobID"

                  fi
               done  
            if [ $ProfCount -le 0 ]; then
                 echo "$PROFILE_NAME profile doesn't exists in $project_name project!!"
                 exit 1
            fi             
     #jobID=$(curl -s -k --location --request GET "https://${FX_HOSTNAME}/api/v1/jobs/project-id/${i}?page=0&pageSize=10" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.[].id')
     #envID=$(curl -s -k --location --request GET "https://${FX_HOSTNAME}/api/v1/jobs/project-id/${i}?page=0&pageSize=10" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.[]|.environment|.id')
     #runId=$(curl -s -k --location --request POST "https://${FX_HOSTNAME}/api/v1/runs/job/${jobID}?region=${REGION}&tags=&suites=&categories=ABAC_Level1,%20ABAC_Level2,%20ABAC_Level3,%20ABAC_Level4,%20ABAC_Level5,%20ABAC_Level6,%20InvalidAuth,%20InvalidAuthEmpty,%20InvalidAuthSQL,%20ADoS,%20Incremental_Ids,%20NoSQL_Injection,%20SLA,%20RBAC,%20sql_injection_timebound,%20Sensitive_Data_Exposure,%20SimpleGET,%20NoSQL_Injection_Filter,%20sql_injection_filter,%20Unsecured,%20XSS_Injection,%20&emailReport=false&projectId=${i}&env=${envID}&endpoints=" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.id')
     runId=$(curl -s -k --location --request POST "https://${FX_HOSTNAME}/api/v1/runs/job/${jobID}?region=${REGION}&tags=&suites=&categories=ABAC_Level1,%20InvalidAuth,%20InvalidAuthEmpty,%20InvalidAuthSQL,%20Unsecured,%20Incremental_Ids,%20PII,%20ADoS,%20Ratelimit_Authenticated,%20Ratelimit_Unauthenticated,%20RBAC,%20Ssrf_External_Url,%20Cors_Config,%20Info_Leak_Ip_Header,%20TLS_Headers,%20NoSQL_Injection,%20Ssl_Certificate_Issues,%20Server_Properties_Leak_In_Headers,%20Linux_Command_Injection,%20Log4j_Injection,%20Reflected_Get_Injection,%20Reflected_Headers,%20Reflected_Post_Injection,%20SQL_Injection_Timebound,%20NoSQL_Injection_Filter,%20SQL_Injection_Filter,%20XSS_Injection,%20Windows_Command_Injection,%20Insecure_Cookies,%20&emailReport=false&projectId=${project_id}&env=${envID}&endpoints=" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.id')
     #runId=$(curl -s -k --location --request POST "https://${FX_HOSTNAME}/api/v1/runs/job/${jobID}?region=${REGION}&tags=&suites=&categories=Unsecured%20&emailReport=false&projectId=${project_id}&env=${envID}&endpoints=" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.id')
     echo "runId:" $runId
     if [ -z "$runId" ]
     then
          echo "RunId = " "$runId"
          echo "Invalid runid"
         # echo $(curl -k --location --request POST "https://${FX_HOSTNAME}/api/v1/runs/project/${FX_PROJECT_NAME}?jobName=${JOB_NAME}&region=${REGION}&emailReport=${FX_EMAIL_REPORT}&reportType=${FX_REPORT_TYPE}${FX_SCRIPT}" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.id')
         #exit 1
     fi
     taskStatus="WAITING"
     echo "taskStatus = " $taskStatus

     while [ "$taskStatus" == "WAITING" -o "$taskStatus" == "PROCESSING" ]
         do
                sleep 5
                 echo "Checking Status...."

                passPercent=$(curl -s -k --location --request GET "https://${FX_HOSTNAME}/api/v1/runs/${runId}" --header "Authorization: Bearer "$token""| jq -r '.["data"]|.ciCdStatus')

                        IFS=':' read -r -a array <<< "$passPercent"

                        taskStatus="${array[0]}"

                        echo "Status =" "${array[0]}" " Success Percent =" "${array[1]}"  " Total Tests =" "${array[2]}" " Total Failed =" "${array[3]}" " Run =" "${array[6]}"



                if [ "$taskStatus" == "COMPLETED" ];then
            echo "------------------------------------------------"                       
                        echo  "Run detail link https://${FX_HOSTNAME}${array[7]}"
                        echo "-----------------------------------------------"
                        echo "Job run successfully completed"  
                        echo "-----------------------------------------------"                        
                        duration=$SECONDS
                        echo "It took $(($duration / 60)) minutes and $(($duration % 60)) seconds to complete the scan on ${project_name} project."
                        echo "-----------------------------------------------"
                        #exit 0                        

                fi
        done

     if [ "$taskStatus" == "TIMEOUT" ];then
        echo "Task Status = " $taskStatus
        echo "$(curl -s -k --location --request GET "https://${FX_HOSTNAME}/api/v1/runs/${runId}" --header "Authorization: Bearer "$token"")"
        #exit 1
     fi

    #echo "$(curl -s -k --location --request GET "https://${FX_HOSTNAME}/api/v1/runs/${runId}" --header "Authorization: Bearer "$token"")"
    #exit 1
   done
   echo "Scanning on Projects of page ${PAGE} is completed."  
   echo "--------------------------------------------------"
   echo " "
   PAGE=`expr $PAGE + 1`
   tscancount=`expr $tscancount + $count`   
done
string2=$(date -u | awk '{print $4}')
StartDate=$(date -u -d "$string1" +"%s")
FinalDate=$(date -u -d "$string2" +"%s")
tDuration=$(date -u -d "0 $FinalDate sec - $StartDate sec" +"%H:%M:%S")
echo "Successfully triggered ${tscancount} scans in $tDuration duration on ${tscancount} projects of ${FX_HOSTNAME} environment!!!"