nvd extractor.stub

---

id: nvd-extractor name: NVD-Extractor repo_path: ~/Documents/sw30labs/repos/NVD-Extractor remote_url: https://github.com/sw30labs/NVD-Extractor.git primary_language: Python framework: NVD API + stdlib ingested: 2026-04-13 last_commit_date: 2025-05-27 category: ai-security stacks: [pentest, cli]

Purpose

Python script to extract critical vulnerabilities from the National Vulnerability Database (NVD) API with network attack vectors. Filters results for OS/API attack surface, generates LLM-optimized outputs, and produces CSV/JSON/Markdown reports.

Architecture

• Three-period date range scanning: Splits 360-day window into 120-day chunks to respect API pagination
• Multi-filter approach: Critical severity + NETWORK attack vector + OS/API classification
• CPE-based classification: Identifies Linux, Windows, and API vulnerabilities via Common Platform Enumeration strings
• Output stratification: Complete dataset, filtered dataset (Linux/Windows/API), and LLM-optimized variants
• LLM-friendly format: Shorter field names, native booleans, metadata context, top-50 by CVSS score
• Prompt templates: Ready-to-use Markdown with embedded JSON for AI analysis

Dependencies

• requests - HTTP API calls to NVD
• Python stdlib (csv, json, datetime, statistics)

Key Features

• Critical CVE extraction with network attack vector filtering
• Linux, Windows, and external API vulnerability classification
• CVSS score, CWE, and CPE enumeration extraction
• Rate-limited API requests with delays
• CSV, JSON, and Markdown output formats
• LLM-optimized outputs for AI-assisted vulnerability analysis
• Comprehensive metadata (date range, count, severity stats)
• Automatic output directory structure management
• Execution reports with timing and statistics

Tags

• python
• security
• nist
• cli
• benchmark

Entities and Topics

• ai-security-pentesting