For anyone looking to automate or streamline vulnerability tracking, this script is designed to get team alerts for newly discovered vulnerabilities found within the last 24 hours.
The time window is fully customizable by replacing '24' with your preferred numeric value. However, please note that this script evaluates all assets within your environment. To mitigate performance impact and prevent overloading your Nexpose server, it is highly recommended to keep this time window as brief as possible.
I’ve put together a step-by-step guide on how to set up and configure alerts using the Nexpose API and a Microsoft Teams webhook.
Please give it a try and let me know if you have any questions or feedback! Note that I used the basic authentication method in this guide, but you can easily switch to using a User API key for authentication instead.
Good idea, I know ICON can pull something like this off.
Although hardcoded creds to security tool… bad juju
I would recommend to use some sort of vault and have them encrypted there.
To my knowledge User API keys dont work with IVM Consoles it uses only basic auth.
You are absolutely right. Hardcoding credentials is definitely bad juju, even for a quick integration.
To address this security concern for our internal lab and controlled environments, I have updated the authentication method. Instead of hardcoding the basic authentication credentials, the setup now pulls them securely via environment variables.
While a dedicated vault is definitely the right move for production, this change should keep our lab environment clean, flexible, and significantly more secure for the time being.
