Vulnerability Pryer - Pries more context into your vulnerability data.
VulnPryer is the code behind a vulnerability reprioritization project. Using a vulnerability data feed (VulnPryer uses the VulnDB commercial project by default), VulnPryer will download that feed on an incremental basis, load the feed into MongoDB for storage, extract a mapping of features, and provide a remapping of vulnerabilities to custom severities for importing into your analysis product of choice (VulnPryer targets the RedSeal platform by default).
VulnPryer may be set up the hard (manual) way and the easy (automated) way.
- Setup an instance of MongoDB (authentication not currently supported)
- git clone https://github.com/davidski/VulnPryer vulnpryer
- cd ./vulnpryer
- pip install -r requirements
- cp vulnpryer.conf{.sample,}
- vi vulnpryer.conf #modify with your settings and credentials.
VulnPryer targets running daily extracts out of VulnDB and generating updated RedSeal Threat
Reference Library files with modified CVSS ratings on an Amazon S3 bucket. This is accomplished
via the vulndb module for working with the VulnDB API, the shiploader module for loading that
data into MongoDB and creating feature extracts, and the forklift module for taking the feature file and
applying a custom formula for creating vulnerability severities and generating TRL files.
The simplest means is to run the vulnpryer.py wrapper script. If you want to replace indlvidual
modules (e.g. to use a different prioritization scheme, import a different vulnerability data feed),
you can run the individual compoents manually:
- vulndb.py
- shiploader.py
- forklift.py
VulnPryer relies on the following third-party libraries. Note that newer versions of these libraries may be available, but have not been tested.
argparse >= 1.2.1 [http://code.google.com/p/argparse/ - Now part of Python, version 2.7, 3.2, or higher]
boto >= 2.32.1 [https://github.com/boto/boto]
filechunkio >= 1.5 [https://bitbucket.org/fabian/filechunkio]
lxml >= 3.3.5 [http://lxml.de/]
oauth2 >= 1.5.211 [http://oauth.net/2/]
pandas >= 0.13.1 [http://pandas.pydata.org/]
pymongo >= 2.7.2 [http://api.mongodb.org/python/current/]
restkit >= 4.2.2 [http://restkit.org/]
simplejson >= 3.6.2 [https://pypi.python.org/pypi/simplejson/]
VulnPryer would not exist without the inspiration and assistance of the following individuals and organizations:
- @alexcpsec and @kylemaxwell for the combine project. VulnPryer has cribbed heavily from that design pattern, including a crude aping of naming metaphors. 😁
- Risk Based Security (RBS) for providing the VulnDB product and for the support in getting this project off the ground.
- Kenna Security for providing the inspiration on this project and their continued support of the community.
- RedSeal for providing the analysis platform for network security posture review and analysis.