public/Disable-TNPolicyLocalPortEnumeration.ps1
|
function Disable-TNPolicyLocalPortEnumeration { <# .SYNOPSIS Disables a list of policy local port enumerations .DESCRIPTION Disables a list of policy local port enumerations .PARAMETER SessionObject Optional parameter to force using specific SessionObjects. By default, each command will connect to all connected servers that have been connected to using Connect-TNServer .PARAMETER PolicyId The ID of the target policy .PARAMETER ScanMethod Scan methods. Options include: WMINetstat, SSHNetstat, SNMPScanner .PARAMETER VerifyOpenPorts Verifies open ports .PARAMETER ScanOnlyIfLocalFails Scan only if local fails .PARAMETER EnableException By default, when something goes wrong we try to catch it, interpret it and give you a friendly warning message. This avoids overwhelming you with 'sea of red' exceptions, but is inconvenient because it basically disables advanced scripting. Using this switch turns this 'nice by default' feature off and enables you to catch exceptions with your own try/catch. .EXAMPLE PS C:\> Connect-TNServer -ComputerName nessus -Credential admin PS C:\> Disable-TNPolicyLocalPortEnumeration -PolicyId 10 -ScanMethod SSHNetstat -VerifyOpenPorts Disables a list of policy local port enumerations for Policy with ID 10 using SSHNetstat scan method and verifies open ports #> [CmdletBinding()] [OutputType([int])] param ( [Parameter(ValueFromPipelineByPropertyName)] [object[]]$SessionObject = (Get-TNSession), [Parameter(Mandatory, ValueFromPipelineByPropertyName)] [int32[]]$PolicyId, [Parameter(Mandatory, ValueFromPipelineByPropertyName)] [ValidateSet('WMINetstat', 'SSHNetstat', 'SNMPScanner')] [string[]]$ScanMethod, [Parameter(ValueFromPipelineByPropertyName)] [switch]$VerifyOpenPorts, [Parameter(ValueFromPipelineByPropertyName)] [switch]$ScanOnlyIfLocalFails, [switch]$EnableException ) begin { $scanners = @{ } foreach ($scanner in $ScanMethod) { if ($scanner -eq 'WMINetstat') { $scanners['wmi_netstat_scanner'] = 'no' } if ($scanner -eq 'SSHNetstat') { $scanners['ssh_netstat_scanner'] = 'no' } if ($scanner -eq 'SNMPScanner') { $scanners['snmp_scanner'] = 'no' } } if ($VerifyOpenPorts) { $scanners['verify_open_ports'] = 'no' } if ($ScanOnlyIfLocalFails) { $scanners['only_portscan_if_enum_failed'] = 'no' } $settings = @{settings = $scanners } $settingsJson = ConvertTo-Json -InputObject $settings -Compress } process { foreach ($session in $SessionObject) { foreach ($policy in $PolicyId) { $params = @{ SessionObject = $session Path = "/policies/$policy" Method = 'PUT' ContentType = "application/json" Parameter = $settingsJson EnableException = $EnableException } $null = Invoke-TNRequest @params Get-TNPolicyLocalPortEnumeration -PolicyId $policy } } } } |