Skip to content

cyberprogramming1/CVE-Report-Generator

Repository files navigation

CVE Report Generator

This project is a CVE Report Generator built using Flask, Python, and several external libraries. It allows users to search for specific CVE IDs and generates detailed reports in various formats such as PDF, DOCX, HTML, and Markdown (MD). The reports include vulnerability descriptions, CVSS scores, severity ratings, exploit links, and references to external sources.

Project Structure

       📦 project_directory
        ┣ 📂 static
        ┃ ┣ 📂 bootstrap
        ┃ ┣ 📂 css
        ┃ ┗ 📂 sass
        ┣ 📂 templates
        ┃ ┣ 📜 index.html
        ┃ ┣ 📜 result.html
        ┃ ┗ 📜 layout.html
        ┣ 📜 app.py
        ┣ 📜 downloader.py
        ┣ 📜 fetch_exploit.py
        ┣ 📜 validator.py
        ┣ 📜 requirements.txt
        ┗ 📜 .env

Installation

git clone https://github.com/cyberprogramming1/CVE-Report-Generator.git

Install required dependencies:

    pip install -r requirements.txt

Set up the .env file for environment variables:

SECRET_KEY=<your_flask_secret_key>
NIST_API_KEY=<your_nist_api_key>

Run the application:

python app.py

Open your browser and navigate to:

    http://127.0.0.1:5000/

Features

  1. CVE Search: Input a CVE ID to get detailed information about the vulnerability.
  2. Report Generation: Export CVE details into PDF, DOCX, HTML, or Markdown files.
  3. Exploit Links: Fetch exploit links related to the CVE from Exploit-DB.
  4. External References: The application opens up to three top references containing technical details about the CVE.

Usage

  1. Enter a valid CVE ID in the search form.
  2. Click "Submit" to fetch data from the NVD and MITRE databases.
  3. View the detailed report, including description, CVSS score, severity, affected vendors, and external references.
  4. Download the report in your preferred format (PDF, DOCX, HTML, or MD).

Example

Here is an example of the workflow:

  1. Input: CVE-2023-XXXX
  2. Output: The application fetches data such as vulnerability description, affected vendors, CVSS metrics, and relevant exploit links. Dependencies

The project requires the following Python packages:

  1. Flask
  2. FPDF
  3. python-docx
  4. requests
  5. BeautifulSoup
  6. markdown
  7. dotenv
  8. Selenium

This project is a collaborative effort by a talented group of developers:

  • Raul
  • Mahmud
  • Ilaha
  • Aynura

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published