Vulnerability check backend

A python script that connects to the vulners.com API to pull in all security vulnerabilities that apply to your setup.
This is the backend responsible for the following:-

• Connecting to the API to get a list of all the types of vulnerabilities i.e. Cisco, Linux, Windows etc.
• Putting these into a SQLite DB so that they can be selected or deselected from the frontend
• Downloading the relevant .zip files from vulners and storing them in a folder to be accessed by the front end.

Table of contents

• Usage
• Installation
• Recommended configurations
• Updating
• Uninstallation
• Contributing
• License

Usage

To use the backend run python3 main.py from within the main directory of the script or setup a crontab job to do this,
i.e. 0 1 * * 0-6 python3 /root/bin/vuln_backend/main.py >/dev/null 2>&1

(Back to top)

Installation

Download the Zip of the script and extract to an easily accessible folder i.e. /root/bin/vuln_backend

You will need to setup the MySQL/MariaDB and MongoDB databases.

Thos MongoDB database is named vulnerabilities and this will need a collection named vuln_sets

Rename config.ini.example to config.ini and change the following values to your values:

DB_SERVER = dbserver DB_USER = dbuser DB_PWD = dbpass DB_NAME = database

MONGO_SERVER = mongoserver MONGO_PORT = 27017

Navigate to the installation directory and run pip install -r requirements.txt

(Back to top)

Updating

To update, check the project homepage here to check the latest release.

(Back to top)

Uninstallation

To uninstall, just delete the files and the crontab if you have set one up.

(Back to top)

Contributing

(Back to top)

Your contributions are always welcome! Please have a look at the contribution guidelines first. 🎉

License

(Back to top)

GPLv3 2017 - LukeBrewerton. Please have a look at the LICENSE.md for more details.