initial stage of python script, will tweak this more tomorrow

Author: jason-at-contrast

.gitignore

@@ -4,4 +4,5 @@ output.json
 *.logs
 .DS_Store
 output.csv
-apps_and_servers.csv
+apps_and_servers.csv
+server_app_metadata.csv

get-server-application-metadata/get-server-app-metadata.py

@@ -0,0 +1,171 @@
+import requests
+import base64
+import getpass
+import json
+
+class Application:
+    def __init__(self, app_id, name):
+        self.app_id = app_id
+        self.name = name
+
+def getApplications(headers, params, org_id):
+    url = f"{contrast_url}/api/ng/{org_id}/applications"
+    response = requests.get(url, headers=headers, params=params)
+    return response
+
+def getServers(headers, servers_href):
+    url = f"{contrast_url}/api{servers_href}"
+    print(f"  Fetching servers from: {url}")
+    response = requests.get(url, headers=headers)
+    return response
+
+def read_creds_file(filename="../.creds"):
+    """Read credentials from a .creds file"""
+    creds = {}
+    try:
+        with open(filename, "r") as f:
+            for line in f:
+                line = line.strip()
+                if line and not line.startswith("#"):
+                    key, value = line.split("=", 1)
+                    creds[key] = value
+    except FileNotFoundError:
+        print(f"Warning: {filename} file not found. Please input values.")
+    return creds
+
+# Read credentials from .creds file
+creds = read_creds_file()
+
+# Set the default for re-using within your organization.
+contrast_url = creds.get("CONTRAST_URL", "")
+org_id = creds.get("ORG_ID", "")
+username = creds.get("USERNAME", "")
+api_key = creds.get("API_KEY", "")
+service_key = creds.get("SERVICE_KEY", "")
+app_id = creds.get("APP_ID", "")
+
+headers = {
+    "Accept": "application/json"
+}
+params = {
+    "expand": ["apps", "vulns", "metadata"]
+}
+
+def main():
+    global contrast_url, org_id, username, api_key, service_key
+
+    msg = f"Enter your Contrast URL (blank will use default '{contrast_url}'): "
+    contrast_url_input = input(msg)
+    if contrast_url_input.strip():
+        contrast_url = contrast_url_input
+    else:
+        while not contrast_url_input.strip() and not contrast_url.strip():
+            print("Contrast URL cannot be blank.")
+            contrast_url_input = input(msg)
+            contrast_url = contrast_url_input
+
+    msg = f"Enter your Organization ID (blank will use default '{org_id}'): "
+    org_id_input = input(msg)
+    if org_id_input.strip():
+        org_id = org_id_input
+    else:
+        while not org_id_input.strip() and not org_id.strip():
+            print("Organization ID cannot be blank.")
+            org_id_input = input(msg)
+            org_id = org_id_input
+
+    msg = f"Enter your username (blank will use default '{username}'): "
+    username_input = input(msg)
+    if username_input.strip():
+        username = username_input
+    else:
+        while not username_input.strip() and not username.strip():
+            print("Username cannot be blank.")
+            username_input = input(msg)
+            username = username_input
+
+    msg = f"Enter your API key (blank will use default '****************************'): "
+    api_key_input = getpass.getpass(msg)
+    if api_key_input.strip():
+        api_key = api_key_input
+    else:
+        while not api_key_input.strip() and not api_key.strip():
+            print("API key cannot be blank.")
+            api_key_input = getpass.getpass(msg)
+            api_key = api_key_input
+
+    msg = f"Enter your service key (blank will use default '************'): "
+    service_key_input = getpass.getpass(msg)
+    if service_key_input.strip():
+        service_key = service_key_input
+    else:
+        while not service_key_input.strip() and not service_key.strip():
+            print("Service key cannot be blank.")
+            service_key_input = getpass.getpass(msg)
+            service_key = service_key_input
+
+    auth_str = f"{username}:{service_key}"
+    auth_b64 = base64.b64encode(auth_str.encode()).decode()
+    headers["Authorization"] = f"Basic {auth_b64}"
+    headers["API-Key"] = api_key
+
+    response = getApplications(headers, params, org_id)
+    if response.status_code == 200:
+        data = response.json()
+        with open("output.json", "w") as f:
+            json.dump(data, f, indent=2)
+        print("Applications response saved to output.json")
+
+        if data.get("applications"):
+            application_list = data["applications"]
+            print(f"Total Applications: {len(application_list)}")
+            
+            for app in application_list:
+                app_name = app.get("name", "N/A")
+                app_id = app.get("app_id", "N/A")
+                metadata_entities = app.get("metadataEntities", [])
+                
+                print(f"\nApplication: {app_name} (ID: {app_id})")
+                
+                # Output metadata entities
+                if metadata_entities:
+                    print(f"  Metadata Entities:")
+                    for entity in metadata_entities:
+                        print(f"    {json.dumps(entity, indent=6)}")
+                else:
+                    print(f"  Metadata Entities: None")
+                
+                # Get the links array from the application
+                links = app.get("links", [])
+                
+                # Find the servers link
+                servers_href = None
+                for link in links:
+                    if link.get("rel") == "servers":
+                        servers_href = link.get("href")
+                        break
+                
+                if servers_href:
+                    print(f"DEBUG: servers_href = {servers_href}")
+                    servers_response = getServers(headers, servers_href)
+                    
+                    if servers_response.status_code == 200:
+                        servers_data = servers_response.json()
+                        servers = servers_data.get("servers", [])                        
+                        
+                        for server in servers:
+                            server_name = server.get("name", "N/A")
+                            server_id = server.get("server_id", "N/A")
+                            print(f"    - Server: {server_name} (ID: {server_id})")
+                    else:
+                        print(f"  Error fetching servers: {servers_response.status_code}")
+                else:
+                    print("  No servers link found for this application")
+        else:
+            print("No applications found in response.")
+            return
+    else:
+        print(f"Error: {response.status_code} - {response.text}")
+
+if __name__ == "__main__":
+    main()