Is there a way to use an offline CSV file or a privately hosted Vulners CVE database?

[oshall]

I'm curious is there a way to use the python script (https://github.com/vulnersCom/api) or https://github.com/vulnersCom/getsploit for using an offline copy of the vulners database instead of sending the software versions that are detected over the Internet. If the local/offline option is not possible how would we use a privately hosted alternative?

[vulnersCom]

Hello!
It's definitely hard. Because of the tons of logic at the backend for the detection.
Unfortunately, on-premise Vulners database is in early-beta.

[kbensimoun]

Hello,

A follow up question to @vulnersCom
I'm also trying to use an offline copy of the vulners db. Is it possible to get into the early beta? If not, I'm a student doing cybersecurity research and am trying to see if I can get it to work locally, would it be possible to have you send me some of the backend code? I was trying to use the get_results function and replace the http request with a local copy. Thanks!

[safir2306]

Hey Guys,

Fell on this a little late in the game, but maybe if you are interestred, check out https://github.com/scipag/vulscan this provides the possibility for offline vuln scanning. just need to update the csv files manually though. Check it out.

Cheers

[wuyasec]

I use scripts to detect websites, but scripts do not prompt.

[vulnersCom]

Hi everyone! Unfortunately, we are not planning to make it offline available. It looks quite impossible for us.