
Security Fundamentals
Turtles, Clams, and Cyber Threat Actors: Shell Usage
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
A Python 3 library and command line tool for the UltiPro Soap API. At present, all functions are read-only against UltiPro.
pip install ultipro
Ensure you have credentials for the UltiPro API endpoints you need to access. If you are pulling BI Reports, your Web Service User must have the Reports-as-a-service endpoint enabled with read access. Please see your UltiPro administrator if you do not have a web service user.
Set up your credentials file. The default location is:
~/Library/Application Support/ultipro-soap-python/config.ini
You can find a sample config file in the root of this project's github repository, config.ini.sample.
To use this tool on the command line, install with pip, then:
$ ultipro --help
You will need to log in to UltiPro and find the path for your desired report. It should look something like:
/content/folder[@name='_UltiPro Delivered Reports']/folder[@name='Human Resources Reports']/report[@name='Employee Birthdays']
You can find more information on page 7 of the WebServiceAPIGuide_BIService.doc
To execute, retrieve, and save a report to disk, use the following syntax:
$ ultipro report "/content/folder[@name='_UltiPro Delivered Reports']/"
If you'd like to use non-default locations for your config.ini file or output file, you can use the following syntax:
ultipro -f ~/some/other/path/to/config.ini -o ~/Desktop/fooreport.csv report "/content/folder[@name='_UltiPro Delivered Reports']/folder[@name='Human Resources Reports']/report[@name='Employee Birthdays']"
FAQs
Python Client for the UltiPro SOAP API
We found that ultipro demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security Fundamentals
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Security News
At VulnCon 2025, NIST scrapped its NVD consortium plans, admitted it can't keep up with CVEs, and outlined automation efforts amid a mounting backlog.
Product
We redesigned our GitHub PR comments to deliver clear, actionable security insights without adding noise to your workflow.