https://github.com/benjitrapp/cisa-known-vuln-scraper
Scraper for daily renewal of the Known Exploited Vulnerabilities Catalog by CISA
https://github.com/benjitrapp/cisa-known-vuln-scraper
cisa cisa-kev github-actions known-vuln vulnerability-management
Last synced: over 1 year ago
JSON representation
Scraper for daily renewal of the Known Exploited Vulnerabilities Catalog by CISA
- Host: GitHub
- URL: https://github.com/benjitrapp/cisa-known-vuln-scraper
- Owner: BenjiTrapp
- Created: 2023-07-23T16:30:53.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2025-04-05T00:31:20.000Z (over 1 year ago)
- Last Synced: 2025-04-06T22:11:22.007Z (over 1 year ago)
- Topics: cisa, cisa-kev, github-actions, known-vuln, vulnerability-management
- Language: Jupyter Notebook
- Homepage: https://benjitrapp.github.io
- Size: 2.47 GB
- Stars: 7
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
[](https://github.com/BenjiTrapp/cisa-known-vuln-scraper/actions/workflows/daily-scraper-cisa-kev.yml)
Daily scaraping of Known Exploited Vulnerabilities @ CISA
Mirroring `https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json`daily and stores it on GitHub, since CISA restricts access and applys rate limites. This simply helps to keep everything at one place, and my automation up and running.
## How it works
The magic is done with the help of this [GitHub Action](.github/workflows/update.yaml)
## How to consume it
You can simply grep the file and search in it like this:
```bash
# Store file
curl https://raw.githubusercontent.com/BenjiTrapp/cisa-known-vuln-scraper/main/cisa-kev.json -o cisa-kev.json
# Search by product name
jq -r '.vulnerabilities[] | select(.product == "FTA")' cisa-kev.json
# Search by Product name
jq -r '.vulnerabilities[] | select(.vendorProject == "Progress")' cisa-kev.json
# Search by CVE
jq -r '.vulnerabilities[] | select(.cveID == "CVE-2023-34362")' cisa-kev.json
```
For integration within Gradle it would look like this:
```groovy
dependencyCheck {
analyzers {
knownExploitedURL = "https://raw.githubusercontent.com/BenjiTrapp/cisa-known-vuln-scraper/main/cisa-kev.json"
}
}
```