Downloading QScanner

To donwload and execute QScanner, follow the steps mentioned below.

  1. You can download QScanner from the Qualys downloads page OR
    you can run the following command in your CLI.
    $ wget <script-download-url>

    After downloading, you receive a shell script file based on the OS and architecture of the Host machine. 
  2. Grant executable permission to download_qscanner.sh
    $ chmod +x download_qscanner.sh
  3. Execute the QScanner script by running the following command.
    $ ./download_qscanner.sh

    By executing this script, your system's configuration including the OS and architecture are assessed, and a suitable QScanner binary is downloaded accordingly.  
    QScanner also performs SHA256 (Secure Hash Algorithm 256-bit) checksum validation on the downloaded binary. To validate QScanner signature, you need to provide a public key using -k <public-key> flag. To get the public key, contact Qualys Customer Support. 
  4. Binary will be downloaded in specific OS-Arch directory. Currently, QScanner can be executed only on Linux OS which is hosted on 'amd64' and 'arm64' architectures.
    For example,
    $ cd linux-<amd64/arm64>
  5. You can also check your QScanner version,   
    $ ./qscanner --version 

General Usage 

QScanner commands follow the syntax given below.

./qscanner <global_options> command <command_options> <target>

Whereas,