An open API service indexing awesome lists of open source software.

https://github.com/vulnerability-lookup/kevsight

A client to generate sightings for Vulnerability-Lookup from the Known Exploited Vulnerabilities (KEV) catalog.
https://github.com/vulnerability-lookup/kevsight

cisa kev sightings vulnerability vulnerability-lookup

Last synced: 5 months ago
JSON representation

A client to generate sightings for Vulnerability-Lookup from the Known Exploited Vulnerabilities (KEV) catalog.

Awesome Lists containing this project

README

          

# KEVSight

A client to generate sightings for
[Vulnerability-Lookup](https://github.com/vulnerability-lookup/vulnerability-lookup) from the
[Known Exploited Vulnerabilities (KEV)](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
catalog.

## Installation

[pipx](https://github.com/pypa/pipx) is an easy way to install and run Python applications in isolated environments.
It's easy to [install](https://github.com/pypa/pipx?tab=readme-ov-file#on-linux).

```bash
$ pipx install KEVSight
$ export KEVSIGHT_CONFIG=~/.KEVSight/conf.py
$ cisa_kev --download-path /home/cedric/.cisa_kev/known_exploited_vulnerabilities.json download
```

The configuration for KEVSight should be defined in a Python file (e.g., ``~/.KEVSight/conf.py``).
You must then set an environment variable (``KEVSIGHT_CONFIG``) with the full path to this file.

### With Docker

```bash
git clone https://github.com/vulnerability-lookup/KEVSight
cd KEVSight

# Make sure conf.py exists in the project root before running
docker compose up --build
```

> [!NOTE]
> The docker-compose.yml expects a conf.py file in the root directory.
> You can create it manually or copy the provided example:
>
> ```bash
> $ cp kevsight/conf_sample.py conf.py
> ```

## Usage

```bash
$ KEVSight --help
usage: KEVSight [-h] [--since SINCE]

options:
-h, --help show this help message and exit
--since SINCE Specify the number of days from today to include in the query
```

## License

[KEVSight](https://github.com/vulnerability-lookup/KEVSight) is licensed under
[GNU General Public License version 3](https://www.gnu.org/licenses/gpl-3.0.html)

~~~
Copyright (c) 2024-2025 Computer Incident Response Center Luxembourg (CIRCL)
Copyright (C) 2024-2025 Cédric Bonhomme - https://github.com/cedricbonhomme
~~~