rdintel-cli

Command-line client for the rdintel.com CVE intelligence API.

Look up a CVE, search the corpus with filters, or browse CVEs by vendor — straight from the terminal, with table or JSON output for piping into jq, grep, or your own scripts.

Install

Go install

go install github.com/rdintel/rdintel-cli@latest

The binary lands at $(go env GOPATH)/bin/rdintel-cli. Rename or symlink to rdintel:

ln -s "$(go env GOPATH)/bin/rdintel-cli" /usr/local/bin/rdintel

From source

git clone https://github.com/rdintel/rdintel-cli
cd rdintel-cli
make build           # produces ./rdintel
sudo make install    # copies to /usr/local/bin/rdintel

Binary releases

Pre-built binaries for Linux, macOS, and Windows are attached to each GitHub Release.

Authenticate

Generate an API key at rdintel.com/account/api-keys/.

export RDINTEL_API_KEY="your-key-here"

Or pass --api-key per call.

Usage

Look up a CVE

rdintel id CVE-2024-3400

CVE          CVE-2024-3400
Title        Palo Alto Networks PAN-OS Command Injection Vulnerability
Severity     CRITICAL
CVSS v3      10.0
CVSS v2      -
Published    2024-04-12
Modified     2025-02-14
CWE          CWE-77
Products     pan-os
Description  A command injection as a result of arbitrary file creation ...

JSON for piping:

rdintel id CVE-2024-3400 -j | jq '.cvss_v3_score'

Search the corpus

Filters compose. At least one filter is required.

rdintel search --severity CRITICAL --since 7d
rdintel search --kev --has-poc
rdintel search --product fortios --min-cvss 8
rdintel search -q "buffer overflow" --limit 20
rdintel search --cwe CWE-79 --since 30d

Common flags:

Flag	Description
--severity	CRITICAL, HIGH, MEDIUM, LOW
--min-cvss N	Minimum CVSS v3 score
--max-cvss N	Maximum CVSS v3 score
--cwe CWE-XX	Filter by CWE ID
--product NAME	Filter by affected product
-q, --query STR	Full-text search
--since 7d	Published within last N days, or ISO date
--kev	Only CVEs in CISA KEV
--has-poc	Only CVEs with public PoC
--has-sigma	Only CVEs with Sigma rules
--has-yara	Only CVEs with YARA rules
--min-threat N	Minimum composite threat score (0–200)
--exploit-status	Exploited, Exploitation More Likely, …
--limit N	Page size (max 50)
--offset N	Pagination offset

Browse a vendor

rdintel vendor cisco
rdintel vendor fortinet --limit 100
rdintel vendor microsoft -j | jq '.results[] | select(.in_kev)'

Global flags

Flag	Description
--api-key	Override RDINTEL_API_KEY
--base-url	Override API base URL (default rdintel.com)
-j, --json	Raw JSON output

Exit codes

Code	Meaning
0	OK
1	API error or invalid arguments

License

MIT — see LICENSE.