Question

Uninstall Rapid7 Agent from Linux

  • 19 April 2024
  • 2 replies
  • 77 views

Badge

Looking for a bash script to uninstall Rapid7 agent on Linux/Ubuntu … please :)


2 replies

Userlevel 5
Badge +1

Hey there @Max Newman 

 

You will need to add the agent_installer-x86_64.sh script as a payload. Rapid7 installer has an uninstaller switch. Worked well for us. 

 

# Evaluation Code

#!/bin/sh

#evaluate the device to see if the Rapid7 service is running
#process running exit with a 0
#process not running exit with a 1

rapid7=$(ps -e | grep ir_agent)

if [ "$rapid7" ]
then
exit 1
else
exit 0
fi

# Remediation Code

#!/bin/sh

#run installation
cp agent_installer-x86_64.sh /tmp/agent_installer-x86_64.sh
chmod u+x /tmp/agent_installer-x86_64.sh
sudo /tmp/agent_installer-x86_64.sh uninstall

 

Badge

Thanks heaps @jack.smith this has proven really helpful :)

Reply