{"id":13841854,"url":"https://github.com/OCSAF/freevulnsearch","last_synced_at":"2025-07-11T13:32:45.833Z","repository":{"id":218715103,"uuid":"163834670","full_name":"OCSAF/freevulnsearch","owner":"OCSAF","description":"Free and open NMAP NSE script to query vulnerabilities via the cve-search.org API.","archived":false,"fork":false,"pushed_at":"2019-11-17T13:46:34.000Z","size":43,"stargazers_count":246,"open_issues_count":1,"forks_count":45,"subscribers_count":18,"default_branch":"master","last_synced_at":"2024-08-05T17:29:31.912Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://freecybersecurity.org","language":"Lua","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/OCSAF.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2019-01-02T11:52:01.000Z","updated_at":"2024-07-29T14:39:47.000Z","dependencies_parsed_at":null,"dependency_job_id":"85e6334a-b38a-4832-bde7-0d01468dd531","html_url":"https://github.com/OCSAF/freevulnsearch","commit_stats":null,"previous_names":["ocsaf/freevulnsearch"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OCSAF%2Ffreevulnsearch","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OCSAF%2Ffreevulnsearch/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OCSAF%2Ffreevulnsearch/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/OCSAF%2Ffreevulnsearch/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/OCSAF","download_url":"https://codeload.github.com/OCSAF/freevulnsearch/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225729718,"owners_count":17515157,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:01:22.907Z","updated_at":"2024-11-21T12:30:31.859Z","avatar_url":"https://github.com/OCSAF.png","language":"Lua","funding_links":[],"categories":["Lua (24)","Lua"],"sub_categories":[],"readme":"# freevulnsearch\n\nThis NMAP NSE script is part of the Free OCSAF project - https://freecybersecurity.org. In conjunction with the version scan \"-sV\" in NMAP, the corresponding vulnerabilities are automatically assigned using CVE (Common Vulnerabilities and Exposures) and the severity of the vulnerability is assigned using CVSS (Common Vulnerability Scoring System). For more clarity, the CVSS are still assigned to the corresponding v3.0 CVSS ratings:\n\n* Critical (CVSS 9.0 - 10.0)\n* High (CVSS 7.0 - 8.9)\n* Medium (CVSS 4.0 - 6.9)\n* Low (CVSS 0.1 - 3.9)\n* None (CVSS 0.0)\n\nThe CVEs are queried by default using the CPEs determined by NMAP via the ingenious and public API of the cve-search.org project, which is provided by circl.lu. For more information visit https://www.cve-search.org/api/.\n\n## Confidentiality information:\n\nThe queries are made using the determined CPE via the circl.lu API. For further information on the confidentiality of the circl.lu API, please visit https://www.circl.lu/services/cve-search/ directly.\n\nThe best way is to install cve-search (https://github.com/cve-search/cve-search) locally and use your own API with\n\n    nmap -sV --script freevulnsearch --script-args apipath=\u003cURL\u003e \u003ctarget\u003e\n\n## Installation:\n\nYou can either specify the script path directly in the NMAP command, for example\n\n    nmap -sV --script ~/freevulnsearch \u003ctarget\u003e\n\nor copy the script into the appropriate directory of your NMAP installation.\n\n    In KALI LINUX™ for example: /usr/share/nmap/scripts/\n\n    sudo nmap --script-ubdatedb\n\nImportant note: First read the confidentiality information. It is recommended to run freevulnsearch.nse separately without additional NSE scripts. If you do not want to make an assignment to the category safe, vuln and external, then do not execute the nmap --script-updatedb command mentioned above.\n\n## Usage:\n\nThe usage is simple, just use NMAP -sV and this script.\n\n    nmap -sV --script freevulnsearch \u003ctarget\u003e\n    \nAccording to my tests, for stability reasons, only http without TLS should be used when querying the API for many simultaneous requests. For this reason, you can optionally disable TLS using an input argument. Important, after that the API query to circl.lu is unencrypted.\n\n    nmap -sV --script freevulnsearch --script-args notls=yes \u003ctarget\u003e\n    \nIf you scan with the categories safe or vuln then exclude the script or the category external or do not add the script to the NMAP default directory. It is recommended to run freevulnsearch.nse separately without additional NSE scripts.\n\n## CPE exception handling for format:\n\nIf a NMAP CPE is not clear, several functions in the freevulnsearch.nse script check whether the formatting of the CPE is inaccurate. For example:\n\n* (MySQL) 5.0.51a-3ubuntu5 -to- 5.0.51a\n* (Exim smtpd) 4.90_1  -to-  4.90\n* (OpenSSH) 6.6.1p1  -to-  6.6:p1\n* (OpenSSH) 7.5p1  -to-  7.5:p1\n* ...\n\nSpecial thanks to the open source community for many useful ideas that accelerated the creation of this script!\nFurther ideas and suggestions for improvement are very welcome.\n\n*KALI LINUX™ is a trademark of Offensive Security.*\n\n*Translated with www.DeepL.com/Translator - Thanks:-)*\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FOCSAF%2Ffreevulnsearch","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FOCSAF%2Ffreevulnsearch","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FOCSAF%2Ffreevulnsearch/lists"}