VIP
GREYCORTEX Vulnerability Intelligence Platform
About
At the moment, this program can work with objects representing CPEs, CVEs, CWEs and CAPECs.
It can parse and save into database (including slow updates):
CPE data from - CPE match feed file
CVE and CPE data from - CVE JSON data feeds
The extended version can get also CWE data from - ZIP file containing XML file with all existing CWE weaknesses CAPEC data from - XML file containing all existing CAPEC attack patterns
It can also perform a quick update of CPE and CVE data thanks to "modified" file from - CVE JSON data feeds
At the end of quick update, a file with SQL queries containing all valuable database update data will be made.
There is a method which can successfully reconstruct CPE match feed file by using objects from the database, too.
JavaDoc documentation
To compile this project
UPDATE "hibernate.cfg.xml" file and copy it to src/main/resources in this project.
Before working with database without Hibernate use
For perfect database structure, update it by queries in the "postgres/update_schema_with_this.sql" file
To run this program
Usage: java -jar VIP
- -b Create and fill database with data including CVE and CPE structures
- -u Perform a quick update of the database (CPE and CVE data)
- NO-NOT-NOW -e Create and fill database with data including CVE, CPE, CWE and CAPEC structures
Current database schemas
Schema of basic structure of the database
Copyright (c) 2021 GreyCortex s.r.o.