Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
zappix aims to be a drop-in replacement for zabbix_get as well as zabbix_sender. Its components are available not only as a module but from the command line as well.
zappix requires Python3 and is guaranteed to work with 3.6.
zappix is not dependant on any third party modules. The easiest way to install it with pip:
pip install zappix
As mentioned earlier - zappix can be used both as a module inside of an application, as well as from the Command Line Interface.
At the moment zappix has two classes: Sender and Get. Both of which can be imported in the following manner:
>>> from zappix.sender import Sender
>>> from zappix.get import Get
Then you can send or get some data. Asuming both Zabbix Agent and Server run on localhost and default ports:
>>> getter = Get("127.0.0.1")
>>> getter.get_value("agent.ping")
1
>>> sender = Sender("127.0.0.1")
>>> sender.send_value('testhost', 'test', 1)
{"processed": 1, "failed": 0, "total": 1, "seconds spent": 0.005}
To use this utility from the command line, you need to invoke python with the -m flag, followed by the module name and required parameters:
python -m zappix.sender -z 127.0.0.1 -s testhost -k testkey -o 1
If you wish to contribute it's good to know how to conduct tests. You can go with mocked tests only or add integration tests as well.
To enable integration tests, set the envvar ZAPPIX_TEST_INTEGRATION=yes
After if you wish to proceed with services in docker containers run the following:
docker run -d -e "ZBX_CACHEUPDATEFREQUENCY=1" -p 10051:10051 -p 80:80 zabbix/zabbix-appliance
docker run -d -e "ZBX_SERVER_HOST=0.0.0.0/0" -p 10050:10050 zabbix/zabbox-agent
Note that the zabbix-appliance might take a while to start. Once both containers are up and running, just run tox
.
If you have your custom Zabbix services, it is possible to configure tests via envvars to connect to those:
envvar | usage |
---|---|
ZAPPIX_AGENT | IP address or DNS name of running Zabbix agent |
ZAPPIX_SERVER | IP address or DNS name of running Zabbix Server |
ZAPPIX_API | URL of Zabbix fronted. Schema is required |
ZAPPIX_API_USER | User for creating entities via API. Should have RW permissions to a Host group with ID=2 - Usually 'Linux Servers' |
ZAPPIX_API_PASS | Password for that user |
FAQs
A Python replacement for Zabbix sender and get.
We found that zappix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.