VIP

GREYCORTEX Vulnerability Intelligence Platform

About

At the moment, this program can work with objects representing CPEs, CVEs, CWEs and CAPECs.

It can parse and save into database (including slow updates):

CPE data from - CPE match feed file

CVE and CPE data from - CVE JSON data feeds

The extended version can get also CWE data from - ZIP file containing XML file with all existing CWE weaknesses CAPEC data from - XML file containing all existing CAPEC attack patterns

It can also perform a quick update of CPE and CVE data thanks to "modified" file from - CVE JSON data feeds

At the end of quick update, a file with SQL queries containing all valuable database update data will be made.

There is a method which can successfully reconstruct CPE match feed file by using objects from the database, too.

JavaDoc documentation

To compile this project

UPDATE "hibernate.cfg.xml" file and copy it to src/main/resources in this project.

Before working with database without Hibernate use

For perfect database structure, update it by queries in the "postgres/update_schema_with_this.sql" file

To run this program

Usage: java -jar VIP

• -b       Create and fill database with data including CVE and CPE structures
• -u       Perform a quick update of the database (CPE and CVE data)
• NO-NOT-NOW -e       Create and fill database with data including CVE, CPE, CWE and CAPEC structures

Current database schemas

Schema of basic structure of the database

Copyright (c) 2021 GreyCortex s.r.o.