HTTP record

/api/2.0/fo/auth/http/

[POST]

Create, update and delete HTTP records for authenticated scans of protected portions of web sites and devices, like printers and routers, that require HTTP protocol level authentication. Vulnerability scans are supported (using VM).

How it works – During a vulnerability scan, if we come across a web page that requires HTTP authentication then we’ll check to see if an HTTP record exists in your account with applicable credentials. If yes, we’ll use the credentials in the record to perform HTTP authentication. (Note this is not Form-based authentication.)

Input Parameters

Parameter	Description
action={action}	(Required) Specify create, update, delete (using POST) or list (using GET or POST). See List Auth Records for type
echo_request={0\|1}	(Optional) Specify 1 to view (echo) input parameters in the XML output. By default these are not included.
ids={value}	(Required to update or delete record) One or more HTTP record IDs.
title={value}	(Required to create record) The record title.
comments={value}	(Optional) User defined comments.
username={value}	(Required to create record, optional to update record) The user name to be used for authentication.
password={value}	(Required to create record, optional to update record) The password to be used for authentication. Maximum 100 characters (ascii).
vhost={value} - or - realm={value}	(Required to create record; optional to update record) Specify the protected device or web page you want to authenticate against. You can specify a virtual host (an FQDN such as vhost=bank.qualys.com) or the name of a realm (realm=My+Homepage).
ssl={0\|1}	(Optional to create or update record) Specify 1 if you want to attempt authentication over SSL only. In this case authentication is attempted only when the form is submitted via a link that uses https://...

Sample 1 - Create HTTP record, realm

API request

curl -u "USERNAME:PASSWORD" -H "X-Requested-With: curl" -d "action=create&username=jsmith&password=abc123&title=My+HTTP+Record+1&realm=My+Homepage" "https://qualysapi.qualys.com/api/2.0/fo/auth/http/"

XML output

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE BATCH_RETURN SYSTEM "https://qualysapi.qualys.com/api/2.0/batch_return.dtd">

<BATCH_RETURN>

<BATCH_LIST>

<BATCH>

<TEXT>Successfully Created</TEXT>

<ID_SET>

</ID_SET>

</BATCH>

</BATCH_LIST>

</RESPONSE>

</BATCH_RETURN

Sample 2 - Create HTTP record, virtual host

API request

curl -u "USERNAME:PASSWORD" -H "X-Requested-With: curl" -d

"action=create&username=jsmith&password=abc123&title=My+HTTP+Record+2&

vhost=bank.us.corp1.com"