https://github.com/wayofthepie/cve-query

https://github.com/wayofthepie/cve-query

Last synced: 10 days ago
JSON representation

• Host: GitHub
• URL: https://github.com/wayofthepie/cve-query
• Owner: wayofthepie
• Created: 2017-10-15T13:33:30.000Z (about 7 years ago)
• Default Branch: master
• Last Pushed: 2017-11-10T09:39:53.000Z (about 7 years ago)
• Last Synced: 2024-11-06T03:44:40.668Z (about 2 months ago)
• Language: Kotlin
• Size: 62.5 KB
• Stars: 0
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Cve Query

Exposes a graphql api for analysis of CVE data. 

See [here](https://cve.mitre.org/about/) for more info on CVE's.

# Running

For now the setup is a bit manual. First you need to run the database:

```shell

$ docker run -ti --net host wayofthepie/vulgr:0.2

```

You can access Neo4J directly at http://localhost:7474, `neo4j/neo4j` are the initial credentials, change the password to `test`, `neo4j/test` is what the app will try to connect with.

This will give you a visual overview of the CVE data model. Next launch the app:

```shell

$ ./gradlew bootRun

```

Finally, navigate to http://localhost:8080/graphiql. 

Query types will auto complete, an example query is:

```graphql

query {

  productsOwnedByVendor(vendorId:"linux", limit:2) {  	

    cpe    

  }

}		

```

This returns the CPE's of the first 2 products owned by linux:

```json

{

  "data": {

    "productsOwnedByVendor": [

      {

        "cpe": "cpe:/o:linux:linux_kernel:4.5.7"

      },

      {

        "cpe": "cpe:/o:linux:linux_kernel:4.6.4"

      }

    ]

  }

}

```