Downloading QScanner
To donwload and execute QScanner, follow the steps mentioned below.
- You can download QScanner from the Qualys downloads page OR
you can run the following command in your CLI.
$ wget <script-download-url>
After downloading, you receive a shell script file based on the OS and architecture of the Host machine. - Grant executable permission to download_qscanner.sh
$ chmod +x download_qscanner.sh
- Execute the QScanner script by running the following command.
$ ./download_qscanner.sh
By executing this script, your system's configuration including the OS and architecture are assessed, and a suitable QScanner binary is downloaded accordingly.
QScanner also performs SHA256 (Secure Hash Algorithm 256-bit) checksum validation on the downloaded binary. To validate QScanner signature, you need to provide a public key using-k <public-key>
flag. To get the public key, contact Qualys Customer Support. - Binary will be downloaded in specific OS-Arch directory. Currently, QScanner can be executed only on Linux OS which is hosted on 'amd64' and 'arm64' architectures.
For example,
$ cd linux-<amd64/arm64>
- You can also check your QScanner version,
$ ./qscanner --version
General Usage
QScanner commands follow the syntax given below.
./qscanner <global_options> command <command_options> <target>
Whereas,
- global_options are explained in Global Options
- command_options are explained in Command Specific Options